diff --git a/forms-flow-documents/requirements/prod.txt b/forms-flow-documents/requirements/prod.txt
index 22aa7ef33f..2dda8d0d2f 100644
--- a/forms-flow-documents/requirements/prod.txt
+++ b/forms-flow-documents/requirements/prod.txt
@@ -20,3 +20,4 @@ blinker<1.8.0 # latest selenium-wire have breaking changes with blinker
 nested-lookup
 setuptools
 git+https://github.com/aot-technologies/forms-flow-ai.git@develop#subdirectory=forms-flow-api-utils
+urllib3>=2.6.0 # not directly required, pinned by Snyk to avoid a vulnerability