diff --git a/requirements-dev.txt b/requirements-dev.txt
index c534a931f0c92..5427470d9ea95 100644
--- a/requirements-dev.txt
+++ b/requirements-dev.txt
@@ -376,3 +376,4 @@ yarl==1.9.4
     # via
     #   -c requirements.txt
     #   aiohttp
+zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability