diff --git a/dev_requirements.txt b/dev_requirements.txt
index feffbb0..ea4a62e 100644
--- a/dev_requirements.txt
+++ b/dev_requirements.txt
@@ -1,2 +1,3 @@
 -r requirements.txt
 pre-commit==2.13.0
+zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability