diff --git a/requirements/optional_m1_2.txt b/requirements/optional_m1_2.txt
index 42a07692d8343..f0fc6ec6b1940 100644
--- a/requirements/optional_m1_2.txt
+++ b/requirements/optional_m1_2.txt
@@ -12,3 +12,4 @@ pandas
 pyspark
 autoflake  # for backend generation
 snakeviz  # for profiling
+tornado>=6.5.3 # not directly required, pinned by Snyk to avoid a vulnerability