diff --git a/splunk_eventgen/lib/requirements.txt b/splunk_eventgen/lib/requirements.txt
index d9cd22f7..d12c0fb3 100644
--- a/splunk_eventgen/lib/requirements.txt
+++ b/splunk_eventgen/lib/requirements.txt
@@ -2,3 +2,4 @@ ujson==2.0.3
 jinja2==2.10.3
 requests-futures==1.0.0
 urllib3==1.24.2
+requests>=2.32.0 # not directly required, pinned by Snyk to avoid a vulnerability