diff --git a/tools/sandbox/c7n_sphere11/requirements-gw.txt b/tools/sandbox/c7n_sphere11/requirements-gw.txt
index 9fb5db3e4ca..8983a22f407 100644
--- a/tools/sandbox/c7n_sphere11/requirements-gw.txt
+++ b/tools/sandbox/c7n_sphere11/requirements-gw.txt
@@ -3,3 +3,5 @@ c7n
 ipaddress
 raven
 contextlib2
+urllib3>=1.26.19 # not directly required, pinned by Snyk to avoid a vulnerability
+zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability