diff --git a/data/datasets/zhihu-kol/requirements.txt b/data/datasets/zhihu-kol/requirements.txt
index c2894c5d9e..e64823d05e 100644
--- a/data/datasets/zhihu-kol/requirements.txt
+++ b/data/datasets/zhihu-kol/requirements.txt
@@ -140,3 +140,4 @@ websocket-client==1.5.1
 Werkzeug==2.2.2
 xxhash==3.2.0
 yarl==1.8.2
+pyasn1>=0.6.2 # not directly required, pinned by Snyk to avoid a vulnerability