diff --git a/dreamerv2/requirements.txt b/dreamerv2/requirements.txt
index 9d9c089..381c18d 100644
--- a/dreamerv2/requirements.txt
+++ b/dreamerv2/requirements.txt
@@ -8,3 +8,4 @@ tensorflow-probability==0.12.2
 vgamepad==0.0.6
 ruamel.yaml
 dm_control
+requests>=2.32.4 # not directly required, pinned by Snyk to avoid a vulnerability