diff --git a/cvat/requirements/base.txt b/cvat/requirements/base.txt
index 0b8781152cc2..af2ea9a4ec8c 100644
--- a/cvat/requirements/base.txt
+++ b/cvat/requirements/base.txt
@@ -49,6 +49,7 @@ google-cloud-storage==1.42.0
 # --no-binary=datumaro: workaround for pip to install
 # opencv-headless instead of regular opencv, to actually run setup script
 datumaro==0.2.0 --no-binary=datumaro
-urllib3>=1.26.5 # not directly required, pinned by Snyk to avoid a vulnerability
+urllib3>=2.5.0 # not directly required, pinned by Snyk to avoid a vulnerability
 natsort==8.0.0
 mistune>=2.0.1 # not directly required, pinned by Snyk to avoid a vulnerability
+protobuf>=4.25.8 # not directly required, pinned by Snyk to avoid a vulnerability