diff --git a/packages/python/plotly/test_requirements/requirements_38_core.txt b/packages/python/plotly/test_requirements/requirements_38_core.txt
index edb622db5c0..af115d99afd 100644
--- a/packages/python/plotly/test_requirements/requirements_38_core.txt
+++ b/packages/python/plotly/test_requirements/requirements_38_core.txt
@@ -1,3 +1,4 @@
 requests==2.25.1
 tenacity==6.2.0
 pytest==6.2.3
+urllib3>=2.5.0 # not directly required, pinned by Snyk to avoid a vulnerability