diff --git a/lldb/third_party/Python/module/pexpect-4.6/requirements-testing.txt b/lldb/third_party/Python/module/pexpect-4.6/requirements-testing.txt
index 1894122c85c56..3c43d5c1c9c46 100644
--- a/lldb/third_party/Python/module/pexpect-4.6/requirements-testing.txt
+++ b/lldb/third_party/Python/module/pexpect-4.6/requirements-testing.txt
@@ -3,3 +3,4 @@ pytest-cov
 coverage
 coveralls
 pytest-capturelog
+urllib3>=2.5.0 # not directly required, pinned by Snyk to avoid a vulnerability