diff --git a/tools/c7n_sphinxext/requirements.txt b/tools/c7n_sphinxext/requirements.txt
index 58c133b73a1..b48221fe996 100644
--- a/tools/c7n_sphinxext/requirements.txt
+++ b/tools/c7n_sphinxext/requirements.txt
@@ -3,3 +3,7 @@ Pygments==2.4.1
 recommonmark>=0.5.0
 git+https://github.com/readthedocs/sphinx_rtd_theme.git#egg=sphinx-rtd-theme
 git+https://github.com/kapilt/sphinx-markdown-tables.git#egg=sphinx-markdown-tables
+certifi>=2024.7.4 # not directly required, pinned by Snyk to avoid a vulnerability
+idna>=3.7 # not directly required, pinned by Snyk to avoid a vulnerability
+jinja2>=3.1.4 # not directly required, pinned by Snyk to avoid a vulnerability
+requests>=2.31.0 # not directly required, pinned by Snyk to avoid a vulnerability