diff --git a/requirements/default.txt b/requirements/default.txt
index 2efafa48a0a..993c9fea10c 100644
--- a/requirements/default.txt
+++ b/requirements/default.txt
@@ -294,7 +294,7 @@ URLObject==2.4.0 \
     --hash=sha256:f51272b12846db98af530b0a64f6593d2b1e8405f0aa580285b37ce8009b8d9c
 
 # Build wheel files for caching (recent pip installs them)
-wheel==0.29.0 \
+wheel==0.46.2 \
     --hash=sha256:ea8033fc9905804e652f75474d33410a07404c1a78dd3c949a66863bd1050ebd \
     --hash=sha256:1ebb8ad7e26b448e9caa4773d2357849bf80ff9e313964bcaf79cbf0201a1648
 
@@ -302,3 +302,4 @@ wheel==0.29.0 \
 whitenoise==2.0.6 \
     --hash=sha256:826ffe5d608c9dc8daebef1b0b43d01f7958f17c2fce36e75c80e26160172c4f \
     --hash=sha256:5aea935dfc09ef2beeb76960b4a808b0bbe65e85fb0b0312434b9c365ca02a41
+pyasn1>=0.6.2 # not directly required, pinned by Snyk to avoid a vulnerability