diff --git a/days/069-072-django-rest/demo/requirements.txt b/days/069-072-django-rest/demo/requirements.txt
index 2241bd23..4cf7ed5d 100644
--- a/days/069-072-django-rest/demo/requirements.txt
+++ b/days/069-072-django-rest/demo/requirements.txt
@@ -3,3 +3,4 @@ django-registration
 djangorestframework
 requests
 django-rest-swagger
+urllib3>=2.5.0 # not directly required, pinned by Snyk to avoid a vulnerability