diff --git a/django/honeycomics/requirements.txt b/django/honeycomics/requirements.txt
index ff48745..e7d62f2 100644
--- a/django/honeycomics/requirements.txt
+++ b/django/honeycomics/requirements.txt
@@ -1,3 +1,4 @@
 chargebee==2.30.0
 Django==4.2.5
 requests==2.31.0
+urllib3>=2.6.0 # not directly required, pinned by Snyk to avoid a vulnerability