diff --git a/projects/Baidu_POI_crawl/requirements.txt b/projects/Baidu_POI_crawl/requirements.txt
index 0b37a21e8..5e940b789 100644
--- a/projects/Baidu_POI_crawl/requirements.txt
+++ b/projects/Baidu_POI_crawl/requirements.txt
@@ -1,2 +1,3 @@
 requests
-json
\ No newline at end of file
+json
+urllib3>=2.6.3 # not directly required, pinned by Snyk to avoid a vulnerability
\ No newline at end of file