diff --git a/language/sample-apps/chat-streamlit/requirements.txt b/language/sample-apps/chat-streamlit/requirements.txt
index fb9f15db039..e6bd2e24ac9 100644
--- a/language/sample-apps/chat-streamlit/requirements.txt
+++ b/language/sample-apps/chat-streamlit/requirements.txt
@@ -1,3 +1,4 @@
 google-cloud-aiplatform>=1.31.0
 streamlit
 streamlit-chat
+tornado>=6.4.2 # not directly required, pinned by Snyk to avoid a vulnerability