diff --git a/requirements_py38.txt b/requirements_py38.txt
index 7d8191224..8ccd793a9 100644
--- a/requirements_py38.txt
+++ b/requirements_py38.txt
@@ -9,3 +9,4 @@ scipy==1.5.4
 scikit-learn
 jinja2==2.10.1
 pandas==1.1.5
+pillow>=10.0.0 # not directly required, pinned by Snyk to avoid a vulnerability