diff --git a/python/requirements.txt b/python/requirements.txt
index 7db8ac10d..36fcec1ce 100644
--- a/python/requirements.txt
+++ b/python/requirements.txt
@@ -7,3 +7,4 @@ construct>=2.9,!=2.10.55
 typing_extensions>=3.10
 dataclasses ; python_version<'3.7'
 rlp>=1.1.0 ; python_version<'3.7'
+urllib3>=2.6.0 # not directly required, pinned by Snyk to avoid a vulnerability