diff --git a/requirements-dev.txt b/requirements-dev.txt
index 2e742ec2..751ed1f3 100644
--- a/requirements-dev.txt
+++ b/requirements-dev.txt
@@ -29,3 +29,4 @@ flake8-mutable==1.2.0
 flake8-pep3101==1.2.1
 flake8-tidy-imports==2.0.0
 flake8-tuple==0.4.0
+zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability