diff --git a/backend/requirements/local.txt b/backend/requirements/local.txt
index c95ba9e1..efaca03f 100644
--- a/backend/requirements/local.txt
+++ b/backend/requirements/local.txt
@@ -29,3 +29,4 @@ django-debug-toolbar==2.2  # https://github.com/jazzband/django-debug-toolbar
 django-extensions==2.2.9  # https://github.com/django-extensions/django-extensions
 django-coverage-plugin==1.8.0  # https://github.com/nedbat/django_coverage_plugin
 pytest-django==3.9.0  # https://github.com/pytest-dev/pytest-django
+django>=4.2.17 # not directly required, pinned by Snyk to avoid a vulnerability