diff --git a/doc/doc-requirements.txt b/doc/doc-requirements.txt
index f4eaf3a22..e50eeea83 100644
--- a/doc/doc-requirements.txt
+++ b/doc/doc-requirements.txt
@@ -19,3 +19,4 @@ sphinx-copybutton
 # package, which means we need to install it on RTD so it is available for
 # inspection.
 -r ../requirements.txt
+zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability