diff --git a/src/ml/train/requirements.txt b/src/ml/train/requirements.txt
index fc658311d..7e4a59400 100644
--- a/src/ml/train/requirements.txt
+++ b/src/ml/train/requirements.txt
@@ -2,4 +2,5 @@ scikit-learn
 brainflow
 metric-learn
 libsvm
-skl2onnx 
\ No newline at end of file
+skl2onnx 
+onnx>=1.17.0 # not directly required, pinned by Snyk to avoid a vulnerability
\ No newline at end of file