diff --git a/python/requirements.txt b/python/requirements.txt
index 7a435ac02cd0..d49db4e24ae2 100644
--- a/python/requirements.txt
+++ b/python/requirements.txt
@@ -3,3 +3,4 @@ cloudpickle>=0.4.0
 numpy>=1.10.0
 six
 futures ; python_version < "3"
+zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability