diff --git a/requirements.txt b/requirements.txt
index c57977bdf7..56be8dba9d 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -154,3 +154,4 @@ html2text==2020.1.16
 duckduckgo-search==3.8.3 
 google-generativeai==0.1.0
 unstructured==0.8.1
+pdfminer.six>=20251107 # not directly required, pinned by Snyk to avoid a vulnerability