diff --git a/dev/requirements.txt b/dev/requirements.txt
index e83bdbe2162e0..d055c1b213614 100644
--- a/dev/requirements.txt
+++ b/dev/requirements.txt
@@ -9,3 +9,5 @@ packaging
 rich
 rich_click
 tabulate
+urllib3>=2.2.2 # not directly required, pinned by Snyk to avoid a vulnerability
+zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability