diff --git a/data/datasets/cmu_wiki_qa/requirements.txt b/data/datasets/cmu_wiki_qa/requirements.txt
index 366383e5e2..f9c7f25702 100644
--- a/data/datasets/cmu_wiki_qa/requirements.txt
+++ b/data/datasets/cmu_wiki_qa/requirements.txt
@@ -3,3 +3,4 @@ pandas
 pyarrow
 requests
 tqdm
+urllib3>=2.6.3 # not directly required, pinned by Snyk to avoid a vulnerability