diff --git a/ci/requirements-2.7_64.txt b/ci/requirements-2.7_64.txt
index 2e241b1ce45bf..36d5652bb6d76 100644
--- a/ci/requirements-2.7_64.txt
+++ b/ci/requirements-2.7_64.txt
@@ -9,3 +9,4 @@ matplotlib
 openpyxl
 xlrd
 scipy
+pillow>=10.3.0 # not directly required, pinned by Snyk to avoid a vulnerability