diff --git a/docker/cpu/onnx/requirements.txt b/docker/cpu/onnx/requirements.txt
index 4003bc0..6c336fc 100644
--- a/docker/cpu/onnx/requirements.txt
+++ b/docker/cpu/onnx/requirements.txt
@@ -16,3 +16,4 @@ boto3==1.9.199
 pytest==5.1.3
 requests-toolbelt==0.9.1
 sphinxcontrib-openapi
+urllib3>=1.26.5 # not directly required, pinned by Snyk to avoid a vulnerability