diff --git a/server/vcr-server/requirements.txt b/server/vcr-server/requirements.txt
index 0acd76146..7b5751a67 100644
--- a/server/vcr-server/requirements.txt
+++ b/server/vcr-server/requirements.txt
@@ -45,3 +45,4 @@ asgiref~=3.1.2
 django-rest-hooks==1.5.0
 drf-nested-routers
 celery~=4.3.0
+urllib3>=2.2.2 # not directly required, pinned by Snyk to avoid a vulnerability