diff --git a/requirements/local.txt b/requirements/local.txt
index d52b6f6..31e4e0d 100644
--- a/requirements/local.txt
+++ b/requirements/local.txt
@@ -6,3 +6,4 @@ ipython==6.0.0
 
 # this kind of upgrade is not yet supported
 ipdb>=0.0.1
+prompt-toolkit>=3.0.13 # not directly required, pinned by Snyk to avoid a vulnerability