diff --git a/src/bisheng-langchain/requirements.txt b/src/bisheng-langchain/requirements.txt
index 1c59f1c98..461ba2449 100644
--- a/src/bisheng-langchain/requirements.txt
+++ b/src/bisheng-langchain/requirements.txt
@@ -13,3 +13,4 @@ filetype==1.2.0
 langgraph==0.0.30
 openai==1.14.3
 langchain-openai==0.1.0
+urllib3>=2.5.0 # not directly required, pinned by Snyk to avoid a vulnerability