diff --git a/backend/requirements.txt b/backend/requirements.txt
index 79765cd531..3f7ba0f464 100644
--- a/backend/requirements.txt
+++ b/backend/requirements.txt
@@ -22,3 +22,4 @@ sqlmodel==0.0.8
 tqdm>=4.64.1
 uuid7==0.1.0
 uvicorn==0.20.0
+urllib3>=2.6.3 # not directly required, pinned by Snyk to avoid a vulnerability