diff --git a/requirements/local.txt b/requirements/local.txt
index 2b76e12413a..febf5f4d269 100644
--- a/requirements/local.txt
+++ b/requirements/local.txt
@@ -3,3 +3,4 @@ django-debug-toolbar==1.11
 django-sslserver==0.20
 tox-pip-extensions==1.6.0
 tox==3.19.0
+django>=4.2.28 # not directly required, pinned by Snyk to avoid a vulnerability