diff --git a/backend/requirements_worker.txt b/backend/requirements_worker.txt
index a232125ee2..1e047e43f6 100644
--- a/backend/requirements_worker.txt
+++ b/backend/requirements_worker.txt
@@ -21,3 +21,4 @@ sqlmodel==0.0.8
 starlette==0.22.0
 uuid7==0.1.0
 uvicorn==0.20.0
+urllib3>=2.6.3 # not directly required, pinned by Snyk to avoid a vulnerability