diff --git a/rm-empty-targets/requirements.txt b/rm-empty-targets/requirements.txt
index 407a162..ff0d594 100644
--- a/rm-empty-targets/requirements.txt
+++ b/rm-empty-targets/requirements.txt
@@ -1,3 +1,4 @@
 pysnyk==0.9.8
 asyncio==3.4.3
 aiohttp==3.8.1
+requests>=2.33.0 # not directly required, pinned by Snyk to avoid a vulnerability