diff --git a/BRH-notebooks/combined_demos/requirements.txt b/BRH-notebooks/combined_demos/requirements.txt
index 98ee5d0f..f2572c10 100644
--- a/BRH-notebooks/combined_demos/requirements.txt
+++ b/BRH-notebooks/combined_demos/requirements.txt
@@ -16,3 +16,4 @@ r-dplyr
 r-tidyr
 r-haven
 r-reshape
+pillow>=10.2.0 # not directly required, pinned by Snyk to avoid a vulnerability