diff --git a/app/requirements-step-2.txt b/app/requirements-step-2.txt
index 625ab94e..130c5d8c 100644
--- a/app/requirements-step-2.txt
+++ b/app/requirements-step-2.txt
@@ -17,3 +17,4 @@ newtulipy
 matplotlib>=3.0.1
 scipy>=1.1.0
 numpy>=1.22.2 # not directly required, pinned by Snyk to avoid a vulnerability
+fonttools>=4.61.0 # not directly required, pinned by Snyk to avoid a vulnerability