diff --git a/requirements/tests.txt b/requirements/tests.txt
index 1503499e555b..d982ba8ecdcf 100644
--- a/requirements/tests.txt
+++ b/requirements/tests.txt
@@ -240,3 +240,4 @@ webtest==2.0.35 \
     --hash=sha256:44ddfe99b5eca4cf07675e7222c81dd624d22f9a26035d2b93dc8862dc1153c6 \
     --hash=sha256:aac168b5b2b4f200af4e35867cf316712210e3d5db81c1cbdff38722647bb087
     # via -r requirements/tests.in
+zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability