clearml-serving pillow>=10.0.1 # not directly required, pinned by Snyk to avoid a vulnerability