diff --git a/requirements.txt b/requirements.txt
index 723e677..1b0f8f8 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -2,3 +2,4 @@ Flask==2.2.5
 requests==2.32.2
 reportlab==3.6.13
 Faker==18.9.0
+pillow>=10.2.0 # not directly required, pinned by Snyk to avoid a vulnerability