diff --git a/requirements/requirements.txt b/requirements/requirements.txt
index 1b739a2..cc86ec3 100644
--- a/requirements/requirements.txt
+++ b/requirements/requirements.txt
@@ -12,3 +12,4 @@ scipy
 seaborn
 spectrum-overload>=0.2.1
 tqdm
+pillow>=10.3.0 # not directly required, pinned by Snyk to avoid a vulnerability