diff --git a/requirements/test-ci-base.txt b/requirements/test-ci-base.txt
index 3563008e5ca..5421ef24b1a 100644
--- a/requirements/test-ci-base.txt
+++ b/requirements/test-ci-base.txt
@@ -5,3 +5,4 @@ codecov
 -r extras/pymemcache.txt
 -r extras/thread.txt
 -r extras/auth.txt
+requests>=2.32.0 # not directly required, pinned by Snyk to avoid a vulnerability