diff --git a/requirements.txt b/requirements.txt
index ac8d1d14f..2e227ca52 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -46,3 +46,4 @@ faker==26.0.0
 
 # CircleCI build
 setuptools==78.1.1
+pillow>=12.1.1 # not directly required, pinned by Snyk to avoid a vulnerability