diff --git a/ci/requirements-3.4.txt b/ci/requirements-3.4.txt
index fd0a5bc53dd7e..851b4abb0317a 100644
--- a/ci/requirements-3.4.txt
+++ b/ci/requirements-3.4.txt
@@ -18,3 +18,4 @@ sqlalchemy
 bottleneck
 pymysql==0.6.3
 psycopg2
+pillow>=10.3.0 # not directly required, pinned by Snyk to avoid a vulnerability