diff --git a/distributed/FSDP/requirements.txt b/distributed/FSDP/requirements.txt
index 15b7c2c411..04c940d6e7 100644
--- a/distributed/FSDP/requirements.txt
+++ b/distributed/FSDP/requirements.txt
@@ -5,3 +5,4 @@ protobuf
 SentencePiece
 aiohttp>=3.13.3 # not directly required, pinned by Snyk to avoid a vulnerability
 urllib3>=2.6.3 # not directly required, pinned by Snyk to avoid a vulnerability
+zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability