diff --git a/clang/utils/analyzer/requirements.txt b/clang/utils/analyzer/requirements.txt
index 8ae8bc88ac191..8fbc2fc902b8d 100644
--- a/clang/utils/analyzer/requirements.txt
+++ b/clang/utils/analyzer/requirements.txt
@@ -4,3 +4,4 @@ matplotlib
 pandas
 psutil
 seaborn
+zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability