diff --git a/benchmarks/requirements.txt b/benchmarks/requirements.txt
index 5dc157c..f2d00f2 100644
--- a/benchmarks/requirements.txt
+++ b/benchmarks/requirements.txt
@@ -1,2 +1,3 @@
 locust==1.4.1
 redis==3.5.3
+urllib3>=2.5.0 # not directly required, pinned by Snyk to avoid a vulnerability