diff --git a/requirements/development.txt b/requirements/development.txt
index 5b99fd81b6157..e961cf683232a 100644
--- a/requirements/development.txt
+++ b/requirements/development.txt
@@ -281,3 +281,4 @@ zope-interface==5.4.0
 # The following packages are considered to be unsafe in a requirements file:
 # pip
 # setuptools
+urllib3>=2.2.2 # not directly required, pinned by Snyk to avoid a vulnerability