diff --git a/backend/requirements.txt b/backend/requirements.txt
index ce55d2d347a..58d26e7b4aa 100644
--- a/backend/requirements.txt
+++ b/backend/requirements.txt
@@ -138,3 +138,4 @@ opentelemetry-instrumentation-requests==0.53b1
 opentelemetry-instrumentation-logging==0.53b1
 opentelemetry-instrumentation-httpx==0.53b1
 opentelemetry-instrumentation-aiohttp-client==0.53b1
+torch>=2.2.0 # not directly required, pinned by Snyk to avoid a vulnerability