diff --git a/docs/requirements.txt b/docs/requirements.txt
index 805b4141fb76..28b12c2ec3e5 100644
--- a/docs/requirements.txt
+++ b/docs/requirements.txt
@@ -1,2 +1,3 @@
 sphinx==1.8.2
 sphinxcontrib-httpdomain==1.7.0
+pygments>=2.7.4 # not directly required, pinned by Snyk to avoid a vulnerability