diff --git a/polybot/requirements.txt b/polybot/requirements.txt
index 5c6a01f..0637333 100644
--- a/polybot/requirements.txt
+++ b/polybot/requirements.txt
@@ -7,3 +7,4 @@ boto3
 deep_translator
 pandas
 
+fonttools>=4.43.0 # not directly required, pinned by Snyk to avoid a vulnerability