diff --git a/requirements.txt b/requirements.txt
index e13a3b4..631b2e4 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -13,3 +13,4 @@ sphinxcontrib-httpdomain==1.7.0
 sphinxcontrib-napoleon==0.7
 uWSGI==2.0.19.1
 blinker==1.4
+pygments>=2.7.4 # not directly required, pinned by Snyk to avoid a vulnerability