diff --git a/solidity_deposit_contract/web3_tester/requirements.txt b/solidity_deposit_contract/web3_tester/requirements.txt
index 8dadab0bc2..27f37f38a7 100644
--- a/solidity_deposit_contract/web3_tester/requirements.txt
+++ b/solidity_deposit_contract/web3_tester/requirements.txt
@@ -3,3 +3,4 @@ web3==5.4.0
 pytest==3.6.1
 # The eth2spec
 ../../
+urllib3>=2.2.2 # not directly required, pinned by Snyk to avoid a vulnerability