diff --git a/requirements.txt b/requirements.txt
index 215805aa..906aa28c 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -9,3 +9,4 @@ RPi.GPIO==0.7.0
 thespian==3.10.1
 websocket-client==0.57.0
 requests==2.25.0
+zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability