diff --git a/conda.recipe/requirements.txt b/conda.recipe/requirements.txt
index 85c1f4c4..2b1b8e70 100644
--- a/conda.recipe/requirements.txt
+++ b/conda.recipe/requirements.txt
@@ -4,3 +4,4 @@ hvplot
 panel
 pandas
 
+pillow>=10.0.1 # not directly required, pinned by Snyk to avoid a vulnerability