diff --git a/requirements.txt b/requirements.txt
index 6966066..b9eea0b 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -33,3 +33,4 @@ taming-transformers-rom1504
 
 #controlnet
 controlnet_aux
+numpy>=1.22.2 # not directly required, pinned by Snyk to avoid a vulnerability