diff --git a/requirements.txt b/requirements.txt
index 8ec98ed..5019e0f 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -40,3 +40,4 @@ gevent==23.9.1
 # regcore
 -e git+https://github.com/fecgov/regulations-core@master#egg=regcore
 
+sqlparse>=0.5.0 # not directly required, pinned by Snyk to avoid a vulnerability