diff --git a/requirements.dev.txt b/requirements.dev.txt
index b9f44d7..b8799f0 100644
--- a/requirements.dev.txt
+++ b/requirements.dev.txt
@@ -80,3 +80,4 @@ wrapt==1.12.1
 
 # The following packages are considered to be unsafe in a requirements file:
 # setuptools
+zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability