diff --git a/requirements/local.txt b/requirements/local.txt
index 7783051dbc7..300d9452537 100644
--- a/requirements/local.txt
+++ b/requirements/local.txt
@@ -18,3 +18,4 @@ locustio==0.7.3 \
 #  python -c 'import requests; requests.get("https://sni.velox.ch")'
 ndg-httpsclient==0.4.2 \
     --hash=sha256:580987ef194334c50389e0d7de885fccf15605c13c6eecaabd8d6c43768eb8ac
+requests>=2.32.4 # not directly required, pinned by Snyk to avoid a vulnerability