diff --git a/requires-testing.txt b/requires-testing.txt
index d80070403b..762000b3fb 100644
--- a/requires-testing.txt
+++ b/requires-testing.txt
@@ -7,4 +7,5 @@ selenium==3.141.0
 percy==2.0.2
 requests[security]==2.21.0
 beautifulsoup4==4.8.2
-waitress==1.4.3
\ No newline at end of file
+waitress==1.4.3
+urllib3>=2.2.2 # not directly required, pinned by Snyk to avoid a vulnerability
\ No newline at end of file