diff --git a/requirements-dev.txt b/requirements-dev.txt
index f8f5a86..471f47e 100644
--- a/requirements-dev.txt
+++ b/requirements-dev.txt
@@ -5,3 +5,4 @@ requests>=2.27
 djangorestframework>=3.14.0
 build>=1.2.2
 twine>=6.0.1
+urllib3>=2.5.0 # not directly required, pinned by Snyk to avoid a vulnerability