diff --git a/charts/kube-prometheus-stack/hack/requirements.txt b/charts/kube-prometheus-stack/hack/requirements.txt
index 7a19dec281bd..2bf15d86b44c 100644
--- a/charts/kube-prometheus-stack/hack/requirements.txt
+++ b/charts/kube-prometheus-stack/hack/requirements.txt
@@ -1,3 +1,4 @@
 PyYAML==6.0.1
 requests==2.31.0
 jsonnet
+urllib3>=2.2.2 # not directly required, pinned by Snyk to avoid a vulnerability