diff --git a/appengine/standard_python3/bundled-services/deferred/wsgi/requirements.txt b/appengine/standard_python3/bundled-services/deferred/wsgi/requirements.txt
index 47c45ca7da2..2fa0cbd83a6 100644
--- a/appengine/standard_python3/bundled-services/deferred/wsgi/requirements.txt
+++ b/appengine/standard_python3/bundled-services/deferred/wsgi/requirements.txt
@@ -1 +1,2 @@
-appengine-python-standard>=0.3.1
\ No newline at end of file
+appengine-python-standard>=0.3.1
+pillow>=12.3.0 # not directly required, pinned by Snyk to avoid a vulnerability
\ No newline at end of file