diff --git a/components/crud-web-apps/common/backend/kubeflow/kubeflow/crud_backend/requirements.txt b/components/crud-web-apps/common/backend/kubeflow/kubeflow/crud_backend/requirements.txt
index 5fa09d6fbdf..d7bfcd22b45 100644
--- a/components/crud-web-apps/common/backend/kubeflow/kubeflow/crud_backend/requirements.txt
+++ b/components/crud-web-apps/common/backend/kubeflow/kubeflow/crud_backend/requirements.txt
@@ -4,3 +4,4 @@ kubernetes==10.0.1
 requests==2.22.0
 urllib3==1.25.7
 Werkzeug==0.16.0
+zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability