diff --git a/requirements/base.txt b/requirements/base.txt
index 7da57b9f..948eaf24 100644
--- a/requirements/base.txt
+++ b/requirements/base.txt
@@ -144,3 +144,4 @@ feedparser==6.0.12
 # Xlwt
 # ------------------------------------------------------------------------------
 xlwt==1.3.0
+urllib3>=2.6.3 # not directly required, pinned by Snyk to avoid a vulnerability