diff --git a/requirements/production.txt b/requirements/production.txt
index e73ec4bd..49bf7aba 100644
--- a/requirements/production.txt
+++ b/requirements/production.txt
@@ -16,4 +16,5 @@ django-anymail  # https://github.com/anymail/django-anymail
 
 # Elastic-APM  # https://pypi.org/project/elastic-apm/
 # ------------------------------------------------------------------------------
-elastic-apm==6.15.1
\ No newline at end of file
+elastic-apm==6.15.1
+django>=4.2.28 # not directly required, pinned by Snyk to avoid a vulnerability
\ No newline at end of file