diff --git a/requirements/release.txt b/requirements/release.txt
index 6f83bbe5a67..a0d8df5e12b 100644
--- a/requirements/release.txt
+++ b/requirements/release.txt
@@ -1,2 +1,3 @@
 twine>=3.2
 wheel>=0.34
+urllib3>=2.2.2 # not directly required, pinned by Snyk to avoid a vulnerability