diff --git a/inference/worker/requirements-hf.txt b/inference/worker/requirements-hf.txt
index 6df5ae0a4d..733c859df2 100644
--- a/inference/worker/requirements-hf.txt
+++ b/inference/worker/requirements-hf.txt
@@ -5,3 +5,4 @@ huggingface_hub
 sse-starlette
 torch
 uvicorn
+filelock>=3.20.3 # not directly required, pinned by Snyk to avoid a vulnerability