diff --git a/services/session-sidecar/requirements.txt b/services/session-sidecar/requirements.txt
index a8b42f22e2..fc6e7d920a 100644
--- a/services/session-sidecar/requirements.txt
+++ b/services/session-sidecar/requirements.txt
@@ -77,3 +77,4 @@ werkzeug==2.1.0
 
 # The following packages are considered to be unsafe in a requirements file:
 # setuptools
+zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability