diff --git a/02-notifon/notifier/requirements.txt b/02-notifon/notifier/requirements.txt
index 8dab7d0..1510c09 100644
--- a/02-notifon/notifier/requirements.txt
+++ b/02-notifon/notifier/requirements.txt
@@ -1,2 +1,3 @@
 requests==2.18.4
 sodapy==1.4.6
+urllib3>=1.24.2 # not directly required, pinned by Snyk to avoid a vulnerability