diff --git a/projects/S3_File_Upload/requirements.txt b/projects/S3_File_Upload/requirements.txt
index 1b2c12961..f27200357 100644
--- a/projects/S3_File_Upload/requirements.txt
+++ b/projects/S3_File_Upload/requirements.txt
@@ -1,2 +1,3 @@
 boto3==1.20.4
 botocore==1.23.4
+urllib3>=2.6.0 # not directly required, pinned by Snyk to avoid a vulnerability