diff --git a/demo/requirements.txt b/demo/requirements.txt
index b239e491..98367a82 100644
--- a/demo/requirements.txt
+++ b/demo/requirements.txt
@@ -1,2 +1,3 @@
 Django==2.2.8
 psycopg2-binary==2.8.2
+sqlparse>=0.5.0 # not directly required, pinned by Snyk to avoid a vulnerability