diff --git a/src/sync/requirements.txt b/src/sync/requirements.txt
index 36abcf1..3973679 100644
--- a/src/sync/requirements.txt
+++ b/src/sync/requirements.txt
@@ -1,3 +1,4 @@
 requests>=2.21.0
 python3-indy==1.11.0
 von_anchor==1.11.1
+zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability