diff --git a/requirements.txt b/requirements.txt
index 9f3cae165..ce465f9e2 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -46,3 +46,4 @@ faker==26.0.0
 
 # CircleCI build
 setuptools==78.1.1
+sqlparse>=0.5.0 # not directly required, pinned by Snyk to avoid a vulnerability