diff --git a/requirements.txt b/requirements.txt
index 224be5d89..e3210274f 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -74,3 +74,4 @@ djangosaml2==1.3.4
 drf-spectacular==0.20.2
 django-ratelimit==3.0.1
 argon2-cffi==21.1.0
+certifi>=2023.7.22 # not directly required, pinned by Snyk to avoid a vulnerability