diff --git a/template/python3-http/requirements.txt b/template/python3-http/requirements.txt
index bba5730..a3adb46 100644
--- a/template/python3-http/requirements.txt
+++ b/template/python3-http/requirements.txt
@@ -5,3 +5,4 @@ sentry-sdk[flask]
 tox==3.*
 jsonschema
 rfc3987
+zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability