diff --git a/requirements/optional.txt b/requirements/optional.txt
index 567257297aa82..7ecb1d62532c1 100644
--- a/requirements/optional.txt
+++ b/requirements/optional.txt
@@ -26,3 +26,4 @@ pyspark
 autoflake # for backend generation
 snakeviz # for profiling
 cryptography
+keras>=3.12.0 # not directly required, pinned by Snyk to avoid a vulnerability