diff --git a/services/workshop/requirements.txt b/services/workshop/requirements.txt
index 6c71f547..4505bde0 100644
--- a/services/workshop/requirements.txt
+++ b/services/workshop/requirements.txt
@@ -22,3 +22,4 @@ gunicorn==21.2.0
 coverage==7.4.1
 unittest-xml-reporting==3.2.0
 black==24.4.2
+urllib3>=2.5.0 # not directly required, pinned by Snyk to avoid a vulnerability