diff --git a/server/requirements-dev.txt b/server/requirements-dev.txt
index 9f4fd724..76370edf 100644
--- a/server/requirements-dev.txt
+++ b/server/requirements-dev.txt
@@ -8,3 +8,4 @@ pytest>=3.6.3
 python-jose>=3.2.0
 twine>=1.12.1
 -r requirements.txt
+rsa>=4.7 # not directly required, pinned by Snyk to avoid a vulnerability