diff --git a/rest-service/test-requirements.txt b/rest-service/test-requirements.txt
index a3398951f2..1d8ddd8efb 100644
--- a/rest-service/test-requirements.txt
+++ b/rest-service/test-requirements.txt
@@ -6,3 +6,4 @@ pytest-xdist
 # agent is only here for the mgmtworker, which is only (temporarily) used in tests
 https://github.com/cloudify-cosmo/cloudify-agent/archive/master.zip
 -e ../mgmtworker
+zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability