diff --git a/demo/tf-requirements.txt b/demo/tf-requirements.txt
index f16f3aa066..666fb0a618 100644
--- a/demo/tf-requirements.txt
+++ b/demo/tf-requirements.txt
@@ -1,2 +1,3 @@
 -e git+https://github.com/mindee/doctr.git#egg=python-doctr[tf]
 streamlit>=1.0.0
+tornado>=6.5.3 # not directly required, pinned by Snyk to avoid a vulnerability