diff --git a/requirements/test.txt b/requirements/test.txt
index 10d3d4923ee..541ef44fbf8 100644
--- a/requirements/test.txt
+++ b/requirements/test.txt
@@ -21,3 +21,4 @@ didkit==0.2.1
 datar==0.8.6
 pdtypes==0.0.4
 importlib-metadata==4.13.0
+django>=4.2.17 # not directly required, pinned by Snyk to avoid a vulnerability