diff --git a/online-inference/bloom-176b/model/requirements.txt b/online-inference/bloom-176b/model/requirements.txt
index 4e82fff9..a5885969 100644
--- a/online-inference/bloom-176b/model/requirements.txt
+++ b/online-inference/bloom-176b/model/requirements.txt
@@ -1,3 +1,4 @@
 accelerate==0.11.0
 git+https://github.com/huggingface/transformers.git@ccc0897 # For device_map in pipelines() support
-kserve==0.8.0.2
\ No newline at end of file
+kserve==0.8.0.2
+tornado>=6.4.2 # not directly required, pinned by Snyk to avoid a vulnerability
\ No newline at end of file