diff --git a/requirements-common.txt b/requirements-common.txt
index aa165ff6d6a5..c07c3ae67323 100644
--- a/requirements-common.txt
+++ b/requirements-common.txt
@@ -31,3 +31,4 @@ pyyaml
 six>=1.16.0; python_version > '3.11' # transitive dependency of pandas that needs to be the latest version for python 3.12
 setuptools>=74.1.1; python_version > '3.11' # Setuptools is used by triton, we need to ensure a modern version is installed for 3.12+ so that it does not try to import distutils, which was removed in 3.12
 einops # Required for Qwen2-VL.
+urllib3>=2.6.0 # not directly required, pinned by Snyk to avoid a vulnerability