diff --git a/onnxruntime/python/tools/transformers/requirements_cpu.txt b/onnxruntime/python/tools/transformers/requirements_cpu.txt
index ff4e066ed980c..e51ab03b676d8 100644
--- a/onnxruntime/python/tools/transformers/requirements_cpu.txt
+++ b/onnxruntime/python/tools/transformers/requirements_cpu.txt
@@ -12,3 +12,4 @@ onnxconverter_common
 torch==1.7.1+cpu
 torchvision==0.8.2+cpu
 torchaudio===0.7.2
+pillow>=10.0.1 # not directly required, pinned by Snyk to avoid a vulnerability