diff --git a/requirements_dev.txt b/requirements_dev.txt
index 03c75b7..a4935d0 100644
--- a/requirements_dev.txt
+++ b/requirements_dev.txt
@@ -2,3 +2,4 @@ pip==20.0.2
 wheel==0.34.2
 twine==3.1.1
 
+urllib3>=2.2.2 # not directly required, pinned by Snyk to avoid a vulnerability