diff --git a/requirements/requirements.txt b/requirements/requirements.txt
index 1b739a2..cdfe78e 100644
--- a/requirements/requirements.txt
+++ b/requirements/requirements.txt
@@ -12,3 +12,4 @@ scipy
 seaborn
 spectrum-overload>=0.2.1
 tqdm
+zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability