diff --git a/local-requirements.txt b/local-requirements.txt
index 24f15a179..9ba81bfe4 100644
--- a/local-requirements.txt
+++ b/local-requirements.txt
@@ -22,3 +22,4 @@ twisted==23.10.0
 types-pyOpenSSL==24.0.0.20240130
 types-requests==2.31.0.10
 wheel==0.41.2
+urllib3>=2.5.0 # not directly required, pinned by Snyk to avoid a vulnerability