diff --git a/dev/requirements.txt b/dev/requirements.txt
index 1b9d907090024..b07e4787f70c3 100644
--- a/dev/requirements.txt
+++ b/dev/requirements.txt
@@ -8,3 +8,4 @@ pyyaml
 packaging
 rich
 tabulate
+requests>=2.32.4 # not directly required, pinned by Snyk to avoid a vulnerability