diff --git a/mcp/simple-python-fast-mcp/requirements.txt b/mcp/simple-python-fast-mcp/requirements.txt
index 4a20bd0..9d4f16f 100644
--- a/mcp/simple-python-fast-mcp/requirements.txt
+++ b/mcp/simple-python-fast-mcp/requirements.txt
@@ -3,3 +3,4 @@ dotenv==0.9.9
 email_validator==2.2.0
 fastmcp==2.11.3
 pip==24.3.1
+python-dotenv>=1.2.2 # not directly required, pinned by Snyk to avoid a vulnerability