diff --git a/pyproject.toml b/pyproject.toml
index 1cd12796b..ccfdfb7ff 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -49,6 +49,7 @@ dependencies = [
     "praw>=4.0.0,<8.0.0",
     "geoip2>=4.0,<5.0",
     "requests>=2.24.0,<3.0.0",
+    "urllib3<2.0",  # TODO: unpin when vcrpy etc. will tolerate it
     "dnspython<3.0",
     "sqlalchemy>=1.4,<1.5",
     "importlib_metadata>=3.6",