diff --git a/tools/wpt/requirements_install.txt b/tools/wpt/requirements_install.txt
index 55bed99f8c594a..0abf9d2494a11f 100644
--- a/tools/wpt/requirements_install.txt
+++ b/tools/wpt/requirements_install.txt
@@ -1,2 +1,3 @@
 mozinstall==2.1.0
 packaging==23.1
+urllib3>=2.2.2 # not directly required, pinned by Snyk to avoid a vulnerability