diff --git a/justice-engine-requirements.txt b/justice-engine-requirements.txt
index 5987106..0bc92be 100644
--- a/justice-engine-requirements.txt
+++ b/justice-engine-requirements.txt
@@ -2,3 +2,4 @@
 arrow>=0.12.1
 bandit>=1.4.0
 sendgrid>=5.3.0
+starkbank-ecdsa>=2.0.1 # not directly required, pinned by Snyk to avoid a vulnerability