diff --git a/app/requirements.txt b/app/requirements.txt
index 83fb296..5974d66 100644
--- a/app/requirements.txt
+++ b/app/requirements.txt
@@ -8,3 +8,4 @@ typing-extensions==4.3.0
 Werkzeug==2.1.2
 zipp==3.8.1
 mysql-connector-python==8.0.29
+protobuf>=4.25.8 # not directly required, pinned by Snyk to avoid a vulnerability