diff --git a/CONST_create_template/ci/requirements.txt b/CONST_create_template/ci/requirements.txt
index 140d774a5..50fea99ec 100644
--- a/CONST_create_template/ci/requirements.txt
+++ b/CONST_create_template/ci/requirements.txt
@@ -1 +1,2 @@
 c2cciutils[checks,publish]==1.6.21
+certifi>=2024.7.4 # not directly required, pinned by Snyk to avoid a vulnerability
diff --git a/ci/requirements.txt b/ci/requirements.txt
index 140d774a5..50fea99ec 100644
--- a/ci/requirements.txt
+++ b/ci/requirements.txt
@@ -1 +1,2 @@
 c2cciutils[checks,publish]==1.6.21
+certifi>=2024.7.4 # not directly required, pinned by Snyk to avoid a vulnerability
diff --git a/custom/requirements.txt b/custom/requirements.txt
index 83eda2755..a79d9cf30 100644
--- a/custom/requirements.txt
+++ b/custom/requirements.txt
@@ -1,2 +1,3 @@
 poetry==1.8.3
 pip==24.1.1
+certifi>=2024.7.4 # not directly required, pinned by Snyk to avoid a vulnerability