diff --git a/python-mip-sklearn/requirements.txt b/python-mip-sklearn/requirements.txt
index 367d03b..aae0fad 100644
--- a/python-mip-sklearn/requirements.txt
+++ b/python-mip-sklearn/requirements.txt
@@ -3,3 +3,4 @@ sklearn_to_pfa==0.3.10
 pandas==0.22.0
 scipy==1.0.1
 scikit-learn==0.19.1
+sqlalchemy>=1.2.18 # not directly required, pinned by Snyk to avoid a vulnerability