diff --git a/requirements.txt b/requirements.txt
index 853c3f3..7c718be 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -2,3 +2,4 @@ fastapi==0.65.2
 pydantic==1.8.2
 redis==3.5.3
 uvicorn==0.14.0
+starlette>=0.40.0 # not directly required, pinned by Snyk to avoid a vulnerability