diff --git a/requirements.txt b/requirements.txt
index 750226a..9b71a0e 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -9,3 +9,4 @@ requests
 urllib3
 termcolor
 validators
+pyyaml>=5.4 # not directly required, pinned by Snyk to avoid a vulnerability