diff --git a/conf/requirements.txt b/conf/requirements.txt
index 0ac6d12..a3fc8d2 100644
--- a/conf/requirements.txt
+++ b/conf/requirements.txt
@@ -3,3 +3,4 @@ markupsafe
 pyOpenSSL
 fastapi
 uvicorn[standard]
+starlette>=0.49.1 # not directly required, pinned by Snyk to avoid a vulnerability