diff --git a/custom/requirements.txt b/custom/requirements.txt
index 65e7a6ca2..6c927371e 100644
--- a/custom/requirements.txt
+++ b/custom/requirements.txt
@@ -1 +1,2 @@
 poetry==1.8.3
+certifi>=2024.7.4 # not directly required, pinned by Snyk to avoid a vulnerability