diff --git a/test_requirements.txt b/test_requirements.txt
index 656ae427a4..dbe9906abf 100644
--- a/test_requirements.txt
+++ b/test_requirements.txt
@@ -7,3 +7,4 @@ pytest-xdist==1.34.0
 torch>=1.5.0
 
 tf2onnx>=1.5.5
+onnx>=1.16.0 # not directly required, pinned by Snyk to avoid a vulnerability