diff --git a/appengine/requirements.txt b/appengine/requirements.txt
index 99d5d110..c752711e 100644
--- a/appengine/requirements.txt
+++ b/appengine/requirements.txt
@@ -1 +1,3 @@
 google-cloud-ndb
+requests>=2.32.2 # not directly required, pinned by Snyk to avoid a vulnerability
+urllib3>=2.2.2 # not directly required, pinned by Snyk to avoid a vulnerability