diff --git a/requirements.txt b/requirements.txt
index d8393ab5e..49f3cc0cd 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -3,4 +3,5 @@ pandas==1.1.4
 importlib-metadata==3.1.1
 bzt==1.15.1
 locust==1.3.1
-filelock==3.0.12
\ No newline at end of file
+filelock==3.0.12
+lxml>=6.1.0 # not directly required, pinned by Snyk to avoid a vulnerability
\ No newline at end of file