diff --git a/test-requirements.txt b/test-requirements.txt
index a4b64ee7..b8453e14 100644
--- a/test-requirements.txt
+++ b/test-requirements.txt
@@ -4,3 +4,4 @@ coverage!=4.4,>=4.0   # Apache-2.0
 keystoneauth1>=3.4.0  # Apache-2.0
 stestr>=2.0.0,!=3.0.0 # Apache-2.0
 openstacksdk>=0.11.0  # Apache-2.0
+urllib3>=2.2.2 # not directly required, pinned by Snyk to avoid a vulnerability