diff --git a/ci/requirements-3.4_32.txt b/ci/requirements-3.4_32.txt
index f2a364ed64311..a4e149fe9c7cf 100644
--- a/ci/requirements-3.4_32.txt
+++ b/ci/requirements-3.4_32.txt
@@ -8,3 +8,4 @@ scipy
 numexpr
 pytables
 matplotlib
+pillow>=10.3.0 # not directly required, pinned by Snyk to avoid a vulnerability