diff --git a/app/ch14_testing/starter/requirements-dev.txt b/app/ch14_testing/starter/requirements-dev.txt
index b5b5372b..09b6db23 100644
--- a/app/ch14_testing/starter/requirements-dev.txt
+++ b/app/ch14_testing/starter/requirements-dev.txt
@@ -1,3 +1,4 @@
 -r requirements.txt
 
 alembic
+zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability