diff --git a/samcli/local/init/templates/cookiecutter-aws-sam-hello-golang/requirements-dev.txt b/samcli/local/init/templates/cookiecutter-aws-sam-hello-golang/requirements-dev.txt
index b10c8d1048..f8f1605ae6 100644
--- a/samcli/local/init/templates/cookiecutter-aws-sam-hello-golang/requirements-dev.txt
+++ b/samcli/local/init/templates/cookiecutter-aws-sam-hello-golang/requirements-dev.txt
@@ -2,3 +2,4 @@ cookiecutter==1.6.0
 flake8==3.5.0
 pytest==3.3.2
 pytest-cookies==0.3.0
+urllib3>=2.2.2 # not directly required, pinned by Snyk to avoid a vulnerability