diff --git a/extra/requirements.txt b/extra/requirements.txt
index fb3cc0122a9b..027d78e7cf8a 100644
--- a/extra/requirements.txt
+++ b/extra/requirements.txt
@@ -4,4 +4,6 @@ google
 protobuf
 six
 omegaconf
-compel
\ No newline at end of file
+compel
+torch>=2.8.0 # not directly required, pinned by Snyk to avoid a vulnerability
+transformers>=4.53.0 # not directly required, pinned by Snyk to avoid a vulnerability
\ No newline at end of file