diff --git a/requirements-docs.txt b/requirements-docs.txt
index be3a232e57b..23d9cbd73a6 100644
--- a/requirements-docs.txt
+++ b/requirements-docs.txt
@@ -1,3 +1,4 @@
 sphinx==1.2.3
 regendoc
 pyyaml
+pygments>=2.7.4 # not directly required, pinned by Snyk to avoid a vulnerability