diff --git a/requirements-opt.txt b/requirements-opt.txt
index 38cab6bdf..4e58b123e 100644
--- a/requirements-opt.txt
+++ b/requirements-opt.txt
@@ -4,3 +4,4 @@ ordereddict
 PyJWT
 requests_jwt
 filemagic>=1.6
+pygments>=2.7.4 # not directly required, pinned by Snyk to avoid a vulnerability