diff --git a/requirements.txt b/requirements.txt
index 000427c..21f3034 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -6,3 +6,4 @@ djangorestframework==3.7.3
 factory-boy==2.9.2
 git+https://github.com/Virako/django-rest-framework-social-oauth2
 psycopg2==2.7.3.2
+requests>=2.32.4 # not directly required, pinned by Snyk to avoid a vulnerability