diff --git a/Pipfile b/Pipfile
index ac01199a341..b9da4af834e 100644
--- a/Pipfile
+++ b/Pipfile
@@ -133,7 +133,7 @@ venusian = "==3.0.0"
 waitress = "==2.1.2"
 webob = "==1.8.7"
 wrapt = "==1.13.3"
-zipp = "==3.7.0"
+zipp = "==3.19.1"
 "zope.deprecation" = "==4.4.0"
 "zope.interface" = "==5.4.0"
 "zope.sqlalchemy" = "==1.6"
diff --git a/Pipfile.lock b/Pipfile.lock
index 54d1e86edfb..cb7ce016bea 100644
--- a/Pipfile.lock
+++ b/Pipfile.lock
@@ -1,7 +1,7 @@
 {
     "_meta": {
         "hash": {
-            "sha256": "d0298e22c9c00c17873492d1dc9e3a6e782302a2afd309de843360bc445679be"
+            "sha256": "4ac570788fbb10c67f7087d8b6b69b2a491894d7b857757b5fd66491c9bbe665"
         },
         "pipfile-spec": 6,
         "requires": {
@@ -1893,11 +1893,11 @@
         },
         "zipp": {
             "hashes": [
-                "sha256:9f50f446828eb9d45b267433fd3e9da8d801f614129124863f9c51ebceafb87d",
-                "sha256:b47250dd24f92b7dd6a0a8fc5244da14608f3ca90a5efcd37a3b1642fac9a375"
+                "sha256:2828e64edb5386ea6a52e7ba7cdb17bb30a73a858f5eb6eb93d8d36f5ea26091",
+                "sha256:35427f6d5594f4acf82d25541438348c26736fa9b3afa2754bcd63cdb99d8e8f"
             ],
             "index": "pypi",
-            "version": "==3.7.0"
+            "version": "==3.19.1"
         },
         "zope.deprecation": {
             "hashes": [
@@ -2529,7 +2529,7 @@
                 "sha256:636694eb41b3535ed608fe04129f26542b59ed99808b4f688aa32dcf55317a83",
                 "sha256:77281a1f71684953ee8b3d488371b162419767973789272434bbc3f29d9c8823"
             ],
-            "markers": "python_version >= '3'",
+            "markers": "python_version >= '3.7'",
             "version": "==4.4.0"
         },
         "jsonschema-gentypes": {
@@ -3506,7 +3506,7 @@
                 "sha256:939de3e7a6161af0c887ef91b7d41a53e7c5a1ca976325f429cb46ea9bc30ecc",
                 "sha256:de526c12914f0c550d15924c62d72abc48d6fe7364aa87328337a31007fe8a4f"
             ],
-            "markers": "python_version < '3.11'",
+            "markers": "python_version >= '3.7'",
             "version": "==2.0.1"
         },
         "tqdm": {
@@ -3719,11 +3719,11 @@
         },
         "zipp": {
             "hashes": [
-                "sha256:9f50f446828eb9d45b267433fd3e9da8d801f614129124863f9c51ebceafb87d",
-                "sha256:b47250dd24f92b7dd6a0a8fc5244da14608f3ca90a5efcd37a3b1642fac9a375"
+                "sha256:2828e64edb5386ea6a52e7ba7cdb17bb30a73a858f5eb6eb93d8d36f5ea26091",
+                "sha256:35427f6d5594f4acf82d25541438348c26736fa9b3afa2754bcd63cdb99d8e8f"
             ],
             "index": "pypi",
-            "version": "==3.7.0"
+            "version": "==3.19.1"
         }
     }
 }
diff --git a/admin/requirements.txt b/admin/requirements.txt
index 8964bbc07f9..29c2dc933c4 100644
--- a/admin/requirements.txt
+++ b/admin/requirements.txt
@@ -16,3 +16,4 @@ jinja2>=2.11.3 # not directly required, pinned by Snyk to avoid a vulnerability
 pygments>=2.7.4 # not directly required, pinned by Snyk to avoid a vulnerability
 setuptools>=65.5.1 # not directly required, pinned by Snyk to avoid a vulnerability
 requests>=2.31.0 # not directly required, pinned by Snyk to avoid a vulnerability
+zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability
diff --git a/ci/requirements.txt b/ci/requirements.txt
index 707d71bd829..8ac5b7ae0d8 100644
--- a/ci/requirements.txt
+++ b/ci/requirements.txt
@@ -2,3 +2,4 @@ c2cciutils==1.1.*
 cryptography>=39.0.1 # not directly required, pinned by Snyk to avoid a vulnerability
 requests>=2.31.0 # not directly required, pinned by Snyk to avoid a vulnerability
 pygments>=2.15.0 # not directly required, pinned by Snyk to avoid a vulnerability
+zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability
diff --git a/doc/Pipfile b/doc/Pipfile
index bcc2f5410b6..dd2d18c0f06 100644
--- a/doc/Pipfile
+++ b/doc/Pipfile
@@ -42,7 +42,7 @@ wrapt = "==1.13.3"
 importlib-metadata = "==5.0.0"
 setuptools = "==65.5.1"
 six = "==1.16.0"
-zipp = "==3.9.1"
+zipp = "==3.19.1"
 pillow = "==10.3.0"
 
 [requires]
diff --git a/doc/Pipfile.lock b/doc/Pipfile.lock
index 8f96f751660..f659c35a010 100644
--- a/doc/Pipfile.lock
+++ b/doc/Pipfile.lock
@@ -1,7 +1,7 @@
 {
     "_meta": {
         "hash": {
-            "sha256": "3608657ee7417b4bd2a1823ff02c6cb0dc4d546d1b49a959e1552457ce9403f6"
+            "sha256": "5db2eca73870ce70954b1c7c0d31c9fda784dcaee2b0d122f8c6975a4b7b617d"
         },
         "pipfile-spec": 6,
         "requires": {
@@ -949,11 +949,11 @@
         },
         "zipp": {
             "hashes": [
-                "sha256:910e3ea948f842be9addc22f51698c57c5a39053edf45a76bcafd2832a0b6cfb",
-                "sha256:97276b5f589df6611b416f839d9e212d9122eadf8dbf2a7be39b74968d681c52"
+                "sha256:2828e64edb5386ea6a52e7ba7cdb17bb30a73a858f5eb6eb93d8d36f5ea26091",
+                "sha256:35427f6d5594f4acf82d25541438348c26736fa9b3afa2754bcd63cdb99d8e8f"
             ],
             "index": "pypi",
-            "version": "==3.9.1"
+            "version": "==3.19.1"
         },
         "zope.deprecation": {
             "hashes": [
diff --git a/docker/config/requirements.txt b/docker/config/requirements.txt
index cedfa97f32d..c75bdbedb15 100644
--- a/docker/config/requirements.txt
+++ b/docker/config/requirements.txt
@@ -4,3 +4,4 @@ poetry-core==1.3.2
 pip==22.3.1
 cryptography>=39.0.1 # not directly required, pinned by Snyk to avoid a vulnerability
 requests>=2.31.0 # not directly required, pinned by Snyk to avoid a vulnerability
+zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability
diff --git a/geoportal/requirements.txt b/geoportal/requirements.txt
index 458878241dc..24092e70145 100644
--- a/geoportal/requirements.txt
+++ b/geoportal/requirements.txt
@@ -33,3 +33,4 @@ jinja2>=2.11.3 # not directly required, pinned by Snyk to avoid a vulnerability
 pygments>=2.7.4 # not directly required, pinned by Snyk to avoid a vulnerability
 setuptools>=65.5.1 # not directly required, pinned by Snyk to avoid a vulnerability
 requests>=2.31.0 # not directly required, pinned by Snyk to avoid a vulnerability
+zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability