diff --git a/CONST_create_template/ci/requirements.txt b/CONST_create_template/ci/requirements.txt
index 9a4e9282f..a217ee673 100644
--- a/CONST_create_template/ci/requirements.txt
+++ b/CONST_create_template/ci/requirements.txt
@@ -1 +1,2 @@
 c2cciutils[checks,publish]==1.4.18
+certifi>=2024.7.4 # not directly required, pinned by Snyk to avoid a vulnerability
diff --git a/ci/requirements.txt b/ci/requirements.txt
index 9a4e9282f..a217ee673 100644
--- a/ci/requirements.txt
+++ b/ci/requirements.txt
@@ -1 +1,2 @@
 c2cciutils[checks,publish]==1.4.18
+certifi>=2024.7.4 # not directly required, pinned by Snyk to avoid a vulnerability
diff --git a/custom/requirements.txt b/custom/requirements.txt
index 65e7a6ca2..6c927371e 100644
--- a/custom/requirements.txt
+++ b/custom/requirements.txt
@@ -1 +1,2 @@
 poetry==1.8.3
+certifi>=2024.7.4 # not directly required, pinned by Snyk to avoid a vulnerability