diff --git a/components/example-notebook-servers/jupyter/requirements.txt b/components/example-notebook-servers/jupyter/requirements.txt
index 8e9e3d04e9c..85cb6fac736 100644
--- a/components/example-notebook-servers/jupyter/requirements.txt
+++ b/components/example-notebook-servers/jupyter/requirements.txt
@@ -1,3 +1,4 @@
 jupyterlab==3.4.3
 notebook==6.4.12
 ipykernel==6.15.0
+tornado>=6.4.2 # not directly required, pinned by Snyk to avoid a vulnerability