diff --git a/the-alexa-skill/python/requirements.txt b/the-alexa-skill/python/requirements.txt
index beadbeab..a4278433 100644
--- a/the-alexa-skill/python/requirements.txt
+++ b/the-alexa-skill/python/requirements.txt
@@ -5,3 +5,4 @@ aws-cdk.aws-dynamodb==1.83.0
 aws-cdk.alexa-ask==1.83.0
 aws-cdk.aws-s3-assets==1.83.0
 aws-cdk.aws-iam==1.83.0
+zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability