diff --git a/requirements-dev.txt b/requirements-dev.txt
index d02c7a9..1a98071 100644
--- a/requirements-dev.txt
+++ b/requirements-dev.txt
@@ -2,3 +2,4 @@
 
 Sphinx
 ipdb
+pygments>=2.7.4 # not directly required, pinned by Snyk to avoid a vulnerability