diff --git a/cvat/requirements/staging.txt b/cvat/requirements/staging.txt
index bc8e8c2c5841..ab2b5446546b 100644
--- a/cvat/requirements/staging.txt
+++ b/cvat/requirements/staging.txt
@@ -1,2 +1,3 @@
 -r production.txt
-django-silk==4.1.0
\ No newline at end of file
+django-silk==4.1.0
+urllib3>=2.6.3 # not directly required, pinned by Snyk to avoid a vulnerability
\ No newline at end of file