diff --git a/requirements.txt b/requirements.txt
index d56a228..32a7a69 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -21,3 +21,4 @@ traceback2==1.4.0
 twilio==6.9.0
 unittest2==1.1.0
 Werkzeug==0.11.2
+pyjwt>=2.4.0 # not directly required, pinned by Snyk to avoid a vulnerability