diff --git a/inference/worker/requirements.txt b/inference/worker/requirements.txt
index cbb25fe322..2cbdaadb8c 100644
--- a/inference/worker/requirements.txt
+++ b/inference/worker/requirements.txt
@@ -12,3 +12,4 @@ sentencepiece
 sseclient-py
 git+https://github.com/huggingface/transformers@main#egg=transformers
 websocket-client
+filelock>=3.20.3 # not directly required, pinned by Snyk to avoid a vulnerability