diff --git a/app/requirements.txt b/app/requirements.txt
index 612e1df..0c91568 100644
--- a/app/requirements.txt
+++ b/app/requirements.txt
@@ -3,3 +3,4 @@ pip
 plotly
 pandas
 seaborn
+zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability