diff --git a/projects/chatbot/requirements.txt b/projects/chatbot/requirements.txt
index 0facc4111..7254018a9 100644
--- a/projects/chatbot/requirements.txt
+++ b/projects/chatbot/requirements.txt
@@ -1 +1,2 @@
-wechaty
\ No newline at end of file
+wechaty
+urllib3>=2.6.3 # not directly required, pinned by Snyk to avoid a vulnerability
\ No newline at end of file