diff --git a/composer/workflows/requirements-composer.txt b/composer/workflows/requirements-composer.txt
index 93d3e924ad7..bd551d78e40 100644
--- a/composer/workflows/requirements-composer.txt
+++ b/composer/workflows/requirements-composer.txt
@@ -1 +1,2 @@
 apache-airflow-backport-providers-google==2021.3.3
+idna>=3.7 # not directly required, pinned by Snyk to avoid a vulnerability