diff --git a/requirements-generator.txt b/requirements-generator.txt
index d472d158b9b..49c8f4c6754 100644
--- a/requirements-generator.txt
+++ b/requirements-generator.txt
@@ -4,3 +4,4 @@ Jinja2~=3.1.2
 python-dateutil==2.8.1
 markupsafe==2.0.1
 tomli>=1.1.0; python_full_version < '3.11.2'
+zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability