diff --git a/test-requirements.txt b/test-requirements.txt
index 7eb48af72e..8a68d6f5bf 100644
--- a/test-requirements.txt
+++ b/test-requirements.txt
@@ -19,6 +19,7 @@ requests-mock>=1.2.0 # Apache-2.0
 keystonemiddleware>=4.17.0 # Apache-2.0
 
 # Security checks
-bandit>=1.1.0 # Apache-2.0
+bandit>=1.7.7 # Apache-2.0
 
 docutils>=0.11  # OSI-Approved Open Source, Public Domain
+zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability