diff --git a/{{cookiecutter.project_slug}}/requirements/local.txt b/{{cookiecutter.project_slug}}/requirements/local.txt
index e0ccc68..4d1e0fb 100644
--- a/{{cookiecutter.project_slug}}/requirements/local.txt
+++ b/{{cookiecutter.project_slug}}/requirements/local.txt
@@ -10,3 +10,4 @@ django-debug-toolbar==1.5
 
 # improved REPL
 ipdb==0.10.1
+django>=4.2.17 # not directly required, pinned by Snyk to avoid a vulnerability