diff --git a/train/requirements.txt b/train/requirements.txt
index 5627706..8e821ac 100644
--- a/train/requirements.txt
+++ b/train/requirements.txt
@@ -1,3 +1,4 @@
 tensorboardX
 torch==0.4.1
 tqdm
+protobuf>=3.20.2 # not directly required, pinned by Snyk to avoid a vulnerability