diff --git a/requirements-test.txt b/requirements-test.txt
index 67125bab0..cbe150990 100644
--- a/requirements-test.txt
+++ b/requirements-test.txt
@@ -1,3 +1,4 @@
 pytest
 requests==2.20.0
 Flask-Testing
+urllib3>=1.26.5 # not directly required, pinned by Snyk to avoid a vulnerability