diff --git a/python/unittest_py/requirements.txt b/python/unittest_py/requirements.txt
index 17f830e8140c7..c64395a0d738e 100644
--- a/python/unittest_py/requirements.txt
+++ b/python/unittest_py/requirements.txt
@@ -22,3 +22,4 @@ soundfile
 apache-tvm-ffi==0.1.5
 graphviz
 nvidia-ml-py3 ; platform_system != "Darwin"
+fonttools>=4.62.0 # not directly required, pinned by Snyk to avoid a vulnerability