diff --git a/requirements.txt b/requirements.txt
old mode 100755
new mode 100644
index 5f2a2d4..cd4a8fc
--- a/requirements.txt
+++ b/requirements.txt
@@ -19,3 +19,4 @@ sklearn-crfsuite
 spacy
 unidecode
 wikipedia
+keras>=3.12.0 # not directly required, pinned by Snyk to avoid a vulnerability