diff --git a/requirements/base.txt b/requirements/base.txt
index bbbc022c..9ef2a3fb 100644
--- a/requirements/base.txt
+++ b/requirements/base.txt
@@ -108,3 +108,5 @@ Sickle==0.7.0  # https://pypi.org/project/sickle/
 # ------------------------------------------------------------------------------
 oaipmh-scythe==0.13.0  # https://pypi.org/project/oaipmh-scythe/
 
+sqlparse>=0.5.4 # not directly required, pinned by Snyk to avoid a vulnerability
+zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability