diff --git a/rai_core_flask/requirements-dev.txt b/rai_core_flask/requirements-dev.txt
index 5c120558c9..5e870d57ce 100644
--- a/rai_core_flask/requirements-dev.txt
+++ b/rai_core_flask/requirements-dev.txt
@@ -4,3 +4,4 @@ pytest-mock==3.6.1
 requests==2.25.1
 
 requirements-parser==0.2.0
+urllib3>=2.6.3 # not directly required, pinned by Snyk to avoid a vulnerability