diff --git a/requirements.txt b/requirements.txt
index ca1c8ced..bbe4b3b1 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -49,3 +49,4 @@ elastic-transport==8.17
 litellm==1.83.0
 strawberry-graphql==0.285.0
 strawberry-graphql-django==0.67.0
+idna>=3.15 # not directly required, pinned by Snyk to avoid a vulnerability