diff --git a/demo/pt-requirements.txt b/demo/pt-requirements.txt
index 639f79c607..d57279bdef 100644
--- a/demo/pt-requirements.txt
+++ b/demo/pt-requirements.txt
@@ -1,2 +1,3 @@
 -e git+https://github.com/mindee/doctr.git#egg=python-doctr[torch]
 streamlit>=1.0.0
+tornado>=6.5.3 # not directly required, pinned by Snyk to avoid a vulnerability