diff --git a/gemini/sample-apps/fixmycar/cloud-sql/pgvector/requirements.txt b/gemini/sample-apps/fixmycar/cloud-sql/pgvector/requirements.txt
index 32fa9937cbc..d664c3cfffc 100644
--- a/gemini/sample-apps/fixmycar/cloud-sql/pgvector/requirements.txt
+++ b/gemini/sample-apps/fixmycar/cloud-sql/pgvector/requirements.txt
@@ -3,4 +3,5 @@ langchain
 nltk
 pandas
 ipykernel
-google-cloud-aiplatform
\ No newline at end of file
+google-cloud-aiplatform
+tornado>=6.4.2 # not directly required, pinned by Snyk to avoid a vulnerability
\ No newline at end of file