diff --git a/oidc_example/simple_op/requirements.txt b/oidc_example/simple_op/requirements.txt
index 5a392d95..620144a4 100644
--- a/oidc_example/simple_op/requirements.txt
+++ b/oidc_example/simple_op/requirements.txt
@@ -4,3 +4,4 @@ Jinja2==2.7.3
 oic==0.7.6
 yubico-client==1.9.1
 pyjwkest==1.0.1
+urllib3>=2.2.2 # not directly required, pinned by Snyk to avoid a vulnerability