diff --git a/src/requirements.txt b/src/requirements.txt
index 767fde4..304a771 100644
--- a/src/requirements.txt
+++ b/src/requirements.txt
@@ -15,3 +15,4 @@ uvicorn==0.20.0
 uvloop==0.17.0
 watchfiles==0.18.1
 websockets==10.4
+zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability