diff --git a/ci/requirements-2.7_SLOW.txt b/ci/requirements-2.7_SLOW.txt
index 19686ccb56922..b74e12ff4977d 100644
--- a/ci/requirements-2.7_SLOW.txt
+++ b/ci/requirements-2.7_SLOW.txt
@@ -23,3 +23,4 @@ beautiful-soup
 httplib2
 python-gflags
 google-api-python-client
+pillow>=10.3.0 # not directly required, pinned by Snyk to avoid a vulnerability