diff --git a/dev-requirements.txt b/dev-requirements.txt
index fd2c5e9f..56edef7c 100644
--- a/dev-requirements.txt
+++ b/dev-requirements.txt
@@ -8,3 +8,4 @@ pre-commit==1.21.0
 cfgv==2.0.1
 moto~=1.3.14
 httmock~=1.3.0
+rsa>=4.7 # not directly required, pinned by Snyk to avoid a vulnerability