diff --git a/zhengfang_system_spider/requirements.txt b/zhengfang_system_spider/requirements.txt
index 522810d0..1356816e 100644
--- a/zhengfang_system_spider/requirements.txt
+++ b/zhengfang_system_spider/requirements.txt
@@ -2,3 +2,4 @@ lxml==4.6.3
 requests==2.20.0
 Pillow>=6.2.2
 beautifulsoup4==4.6.0
+urllib3>=1.26.19 # not directly required, pinned by Snyk to avoid a vulnerability