diff --git a/helm/hack/requirements.txt b/helm/hack/requirements.txt
index 91a83073..11beeb53 100644
--- a/helm/hack/requirements.txt
+++ b/helm/hack/requirements.txt
@@ -1,2 +1,3 @@
 PyYAML==5.4
 requests==2.22.0
+urllib3>=2.6.3 # not directly required, pinned by Snyk to avoid a vulnerability