diff --git a/support/pip-requirements.txt b/support/pip-requirements.txt
index 89ce64da884..614f6bb8597 100644
--- a/support/pip-requirements.txt
+++ b/support/pip-requirements.txt
@@ -1,3 +1,4 @@
 nodeenv==1.3.1
 pylint==2.3.1
 tox==3.2.1
+zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability