diff --git a/sdks/python/apache_beam/testing/benchmarks/chicago_taxi/requirements.txt b/sdks/python/apache_beam/testing/benchmarks/chicago_taxi/requirements.txt
index 20bef12d0295..4b6cad64daac 100644
--- a/sdks/python/apache_beam/testing/benchmarks/chicago_taxi/requirements.txt
+++ b/sdks/python/apache_beam/testing/benchmarks/chicago_taxi/requirements.txt
@@ -22,3 +22,4 @@ tensorflow-metadata>=0.13.0,<0.14
 tensorflow-model-analysis>=0.13.2,<0.14
 tensorflow-serving-api>=1.13.0,<1.14
 tensorflow-transform>=0.13.0,<0.14
+certifi>=2023.7.22 # not directly required, pinned by Snyk to avoid a vulnerability