diff --git a/ci/requirements-3.4.txt b/ci/requirements-3.4.txt
index fd0a5bc53dd7e..12290e5b9e7e5 100644
--- a/ci/requirements-3.4.txt
+++ b/ci/requirements-3.4.txt
@@ -18,3 +18,4 @@ sqlalchemy
 bottleneck
 pymysql==0.6.3
 psycopg2
+zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability