diff --git a/oidc_example/simple_op/requirements.txt b/oidc_example/simple_op/requirements.txt
index 5a392d95..ceaf26df 100644
--- a/oidc_example/simple_op/requirements.txt
+++ b/oidc_example/simple_op/requirements.txt
@@ -4,3 +4,4 @@ Jinja2==2.7.3
 oic==0.7.6
 yubico-client==1.9.1
 pyjwkest==1.0.1
+requests>=2.20 # not directly required, pinned by Snyk to avoid a vulnerability