diff --git a/src/promptflow-tools/requirements.txt b/src/promptflow-tools/requirements.txt
index e5973d226aa..9131d62424d 100644
--- a/src/promptflow-tools/requirements.txt
+++ b/src/promptflow-tools/requirements.txt
@@ -2,3 +2,4 @@ google-search-results==2.4.1
 promptflow>=1.6.0
 # promptflow-tools only supports openai 1.x
 openai>=1.0.0
+urllib3>=2.2.2 # not directly required, pinned by Snyk to avoid a vulnerability