diff --git a/projects/chatbot/requirements.txt b/projects/chatbot/requirements.txt
index 0facc4111..d65d716b3 100644
--- a/projects/chatbot/requirements.txt
+++ b/projects/chatbot/requirements.txt
@@ -1 +1,2 @@
-wechaty
\ No newline at end of file
+wechaty
+h2>=4.3.0 # not directly required, pinned by Snyk to avoid a vulnerability
\ No newline at end of file