diff --git a/requirements.txt b/requirements.txt
index ab3ac15..e2a537c 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -11,3 +11,4 @@ statsmodels>=0.12.2
 sweetviz>=2.1.0
 xgboost>=1.4.1
 
+fonttools>=4.61.0 # not directly required, pinned by Snyk to avoid a vulnerability