diff --git a/tools/gyp/requirements_dev.txt b/tools/gyp/requirements_dev.txt
index 28ecacab6029..c293f86dfea2 100644
--- a/tools/gyp/requirements_dev.txt
+++ b/tools/gyp/requirements_dev.txt
@@ -1,2 +1,3 @@
 flake8
 pytest
+zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability