diff --git a/requirements.txt b/requirements.txt
index 286018f2f..cbac64bcb 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -13,3 +13,4 @@ Jinja2==2.7.2
 python-etcd==0.4.5
 urllib3==1.25.9
 #test push should not push ddd
+dnspython>=2.6.0rc1 # not directly required, pinned by Snyk to avoid a vulnerability