diff --git a/test-requirements.txt b/test-requirements.txt
index a43df81f..58f1dfcb 100644
--- a/test-requirements.txt
+++ b/test-requirements.txt
@@ -8,3 +8,4 @@ pylint
 pytest
 # for integration and platform tests
 cloudify>=3.4.1
+bottle>=0.12.20 # not directly required, pinned by Snyk to avoid a vulnerability