diff --git a/website-backend/requirements.txt b/website-backend/requirements.txt
index 997b2f0..a015c05 100644
--- a/website-backend/requirements.txt
+++ b/website-backend/requirements.txt
@@ -17,3 +17,4 @@ PyJWT==1.7.1
 pytz==2016.6.1
 requests
 virtualenv==15.1.0
+zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability