diff --git a/requirements.txt b/requirements.txt
index caffaa67..b2f77f86 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -5,3 +5,4 @@ gevent==1.4.0
 stem==1.7.1
 lxml==4.3.3
 click==7.0
+urllib3>=1.26.18 # not directly required, pinned by Snyk to avoid a vulnerability