diff --git a/requirements.txt b/requirements.txt
index 75e41170..efdf0519 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -52,3 +52,4 @@ litellm==1.84.0
 strawberry-graphql==0.315.7
 strawberry-graphql-django==0.80.0
 graphql-core==3.2.12 # 3.3.0 drops graphql.execution.ExecutionContext, which strawberry-graphql 0.315.7 imports
+urllib3>=2.8.0 # not directly required, pinned by Snyk to avoid a vulnerability