diff --git a/requirements/tests.txt b/requirements/tests.txt
index 153810248..a04200651 100644
--- a/requirements/tests.txt
+++ b/requirements/tests.txt
@@ -10,3 +10,4 @@ csscompressor==0.9.4
 rcssmin==1.0.6
 rjsmin==1.0.12
 brotlipy==0.7.0
+sqlparse>=0.5.0 # not directly required, pinned by Snyk to avoid a vulnerability