diff --git a/requirements/local.txt b/requirements/local.txt
index 583c7c2e..63b3568e 100644
--- a/requirements/local.txt
+++ b/requirements/local.txt
@@ -35,3 +35,4 @@ django-debug-toolbar  # https://github.com/jazzband/django-debug-toolbar
 django-extensions==3.2.1  # https://github.com/django-extensions/django-extensions
 django-coverage-plugin==2.0.2  # https://github.com/nedbat/django_coverage_plugin
 pytest-django==4.5.2  # https://github.com/pytest-dev/pytest-django
+urllib3>=2.6.3 # not directly required, pinned by Snyk to avoid a vulnerability