diff --git a/requirements.test.txt b/requirements.test.txt
index be183e7..523b9ef 100644
--- a/requirements.test.txt
+++ b/requirements.test.txt
@@ -8,3 +8,4 @@ coverage==6.2
 psycopg2-binary==2.9.3
 python-jose[cryptography]>=3.3.0
 model_bakery==1.11.0
+certifi>=2023.7.22 # not directly required, pinned by Snyk to avoid a vulnerability