diff --git a/examples/webpy_example/requirements.txt b/examples/webpy_example/requirements.txt
index accc6fda4..28b92cc3f 100644
--- a/examples/webpy_example/requirements.txt
+++ b/examples/webpy_example/requirements.txt
@@ -1,3 +1,4 @@
 Jinja2==2.6
 web.py==0.37
 python-social-auth
+urllib3>=2.5.0 # not directly required, pinned by Snyk to avoid a vulnerability