diff --git a/rest-service/requirements.txt b/rest-service/requirements.txt
index 7d574c6a0d..bf28cbdc4d 100644
--- a/rest-service/requirements.txt
+++ b/rest-service/requirements.txt
@@ -222,3 +222,4 @@ wtforms==3.1.2
     # via flask-wtf
 yarl==1.9.4
     # via aiohttp
+zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability