clearml-serving pillow>=10.2.0 # not directly required, pinned by Snyk to avoid a vulnerability