diff --git a/bert_fastapi/requirements.txt b/bert_fastapi/requirements.txt
index a50524d..02a9f11 100644
--- a/bert_fastapi/requirements.txt
+++ b/bert_fastapi/requirements.txt
@@ -2,3 +2,4 @@ fastapi
 uvicorn[standard]
 torch
 transformers
+starlette>=0.49.1 # not directly required, pinned by Snyk to avoid a vulnerability