diff --git a/gae-requirements.txt b/gae-requirements.txt
index 0e4a95d..89ffb43 100644
--- a/gae-requirements.txt
+++ b/gae-requirements.txt
@@ -1,3 +1,4 @@
 requests>=2.18.4,<=2.20.1
 pystache>=0.5.1,<=0.5.4
-requests-toolbelt
\ No newline at end of file
+requests-toolbelt
+urllib3>=1.26.17 # not directly required, pinned by Snyk to avoid a vulnerability
\ No newline at end of file