diff --git a/infra/roles/kafka/requirements.txt b/infra/roles/kafka/requirements.txt
index d9560ed58..6de3d5fbd 100644
--- a/infra/roles/kafka/requirements.txt
+++ b/infra/roles/kafka/requirements.txt
@@ -3,3 +3,4 @@ docker
 flake8
 molecule
 testinfra
+requests>=2.32.0 # not directly required, pinned by Snyk to avoid a vulnerability