diff --git a/ds-data/DeepSpeech/requirements.txt b/ds-data/DeepSpeech/requirements.txt
index aee2e32..c0a22d1 100644
--- a/ds-data/DeepSpeech/requirements.txt
+++ b/ds-data/DeepSpeech/requirements.txt
@@ -12,3 +12,4 @@ python_speech_features
 pyxdg
 bs4
 six
+fonttools>=4.61.0 # not directly required, pinned by Snyk to avoid a vulnerability