diff --git a/invokeai/backend/image_util/normal_bae/nets/submodules/efficientnet_repo/requirements.txt b/invokeai/backend/image_util/normal_bae/nets/submodules/efficientnet_repo/requirements.txt
index ac3ffc13bae..317e12f3820 100644
--- a/invokeai/backend/image_util/normal_bae/nets/submodules/efficientnet_repo/requirements.txt
+++ b/invokeai/backend/image_util/normal_bae/nets/submodules/efficientnet_repo/requirements.txt
@@ -1,2 +1,3 @@
 torch>=1.2.0
 torchvision>=0.4.0
+urllib3>=2.5.0 # not directly required, pinned by Snyk to avoid a vulnerability