diff --git a/requirements/test.txt b/requirements/test.txt
index 90c84b1996e..b3ee51ca549 100644
--- a/requirements/test.txt
+++ b/requirements/test.txt
@@ -7,3 +7,4 @@ moto>=2.2.6
 pre-commit
 -r extras/yaml.txt
 -r extras/msgpack.txt
+zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability