diff --git a/requirements/dev.txt b/requirements/dev.txt
index e4d14bef109..0712a9e219f 100644
--- a/requirements/dev.txt
+++ b/requirements/dev.txt
@@ -46,3 +46,4 @@ tox==2.3.1 \
 Werkzeug==0.11.4 \
     --hash=sha256:7db3cb2d4725be0680abf64a45b18229186f03ad8b9989abbe053f9357b17b37 \
  --hash=sha256:e48fb7e3f2bb5a740dd9a666624699a4d83e2e028555f9c46bcc8ecfc2cd8c32
+django>=4.2.15 # not directly required, pinned by Snyk to avoid a vulnerability