diff --git a/docker/py/requirements.txt b/docker/py/requirements.txt
index 499d3c77..d7178d36 100644
--- a/docker/py/requirements.txt
+++ b/docker/py/requirements.txt
@@ -7,3 +7,4 @@ powerline-shell~=0.7.0
 requests>=2.20.0
 setuptools==57.5.0
 virtualenv>=20.7.2
+mistune>=2.0.1 # not directly required, pinned by Snyk to avoid a vulnerability