diff --git a/userlist/requirements.txt b/userlist/requirements.txt
index 1b7d40a..8a2c77d 100644
--- a/userlist/requirements.txt
+++ b/userlist/requirements.txt
@@ -3,3 +3,4 @@ asyncio>=3.4.3
 aiohttp>=3.8.1
 click>=8.1.2
 pandas
+requests>=2.33.0 # not directly required, pinned by Snyk to avoid a vulnerability