diff --git a/dataflow/gpu-examples/pytorch-minimal/requirements-test.txt b/dataflow/gpu-examples/pytorch-minimal/requirements-test.txt
index 12743ff357..f2ac250826 100644
--- a/dataflow/gpu-examples/pytorch-minimal/requirements-test.txt
+++ b/dataflow/gpu-examples/pytorch-minimal/requirements-test.txt
@@ -2,3 +2,4 @@ google-api-python-client==2.131.0
 google-cloud-storage==2.9.0
 pytest-xdist==3.3.0
 pytest==9.0.3; python_version >= "3.10"
+zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability