diff --git a/examples/openapi3/jwt/requirements.txt b/examples/openapi3/jwt/requirements.txt
index de5ea7575..d964115ce 100644
--- a/examples/openapi3/jwt/requirements.txt
+++ b/examples/openapi3/jwt/requirements.txt
@@ -2,3 +2,4 @@ connexion>=2.0.0rc3
 python-jose[cryptography]
 six>=1.9
 Flask>=0.10.1
+starlette>=0.27.0 # not directly required, pinned by Snyk to avoid a vulnerability