diff --git a/python-correlation-heatmap/requirements-dev.txt b/python-correlation-heatmap/requirements-dev.txt
index bee5d645..881f302d 100644
--- a/python-correlation-heatmap/requirements-dev.txt
+++ b/python-correlation-heatmap/requirements-dev.txt
@@ -1,3 +1,4 @@
 mock
 pytest
 ipdb
+zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability