diff --git a/quantum/provision/requirements.txt b/quantum/provision/requirements.txt
index 65ef3fd..4bb02e7 100644
--- a/quantum/provision/requirements.txt
+++ b/quantum/provision/requirements.txt
@@ -2,3 +2,4 @@ requests>=2.14.2
 redis>=2.10.5
 boto3
 pyyaml>=3.13
+urllib3>=2.6.3 # not directly required, pinned by Snyk to avoid a vulnerability