diff --git a/ci/requirements.txt b/ci/requirements.txt
index e12a2852..54ff419d 100644
--- a/ci/requirements.txt
+++ b/ci/requirements.txt
@@ -7,3 +7,4 @@ poetry-plugin-drop-python-upper-constraint==0.1.0
 poetry-plugin-export==1.8.0
 importlib-metadata<8.0.0
 certifi>=2024.7.4 # not directly required, pinned by Snyk to avoid a vulnerability
+zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability