diff --git a/magic/requirements.txt b/magic/requirements.txt
index b745c18..90a7ebd 100644
--- a/magic/requirements.txt
+++ b/magic/requirements.txt
@@ -1,2 +1,3 @@
 awswrangler
 pyarrow
+urllib3>=2.5.0 # not directly required, pinned by Snyk to avoid a vulnerability