diff --git a/requirements-dev.txt b/requirements-dev.txt
index 78284c20..9022177c 100644
--- a/requirements-dev.txt
+++ b/requirements-dev.txt
@@ -208,3 +208,4 @@ xmltodict==0.12.0
 
 # The following packages are considered to be unsafe in a requirements file:
 # setuptools
+zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability