diff --git a/web/requirements.txt b/web/requirements.txt
index 122ce38..303591b 100644
--- a/web/requirements.txt
+++ b/web/requirements.txt
@@ -2,3 +2,4 @@ nltk
 selenium
 matplotlib
 numpy
+fonttools>=4.43.0 # not directly required, pinned by Snyk to avoid a vulnerability