diff --git a/ci/requirements_all.txt b/ci/requirements_all.txt
index cac6dae3346ef..63a504e91791f 100644
--- a/ci/requirements_all.txt
+++ b/ci/requirements_all.txt
@@ -19,3 +19,4 @@ lxml
 sqlalchemy
 bottleneck
 pymysql
+urllib3>=2.5.0 # not directly required, pinned by Snyk to avoid a vulnerability