diff --git a/solidity_deposit_contract/web3_tester/requirements.txt b/solidity_deposit_contract/web3_tester/requirements.txt
index 8dadab0bc2..7881c03296 100644
--- a/solidity_deposit_contract/web3_tester/requirements.txt
+++ b/solidity_deposit_contract/web3_tester/requirements.txt
@@ -3,3 +3,4 @@ web3==5.4.0
 pytest==3.6.1
 # The eth2spec
 ../../
+zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability