diff --git a/requirements.txt b/requirements.txt
index 18d95149..85a7b555 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -24,4 +24,5 @@ tqdm
 # otherwise librosa breaks, which fucking dcase-util requires
 numba==0.48
 #numba>=0.49.0 # not directly required, pinned by Snyk to avoid a vulnerability
-scikit-learn>=0.24.2 # not directly required, pinned by Snyk to avoid a vulnerability
+scikit-learn>=1.5.0 # not directly required, pinned by Snyk to avoid a vulnerability
+tornado>=6.4.1 # not directly required, pinned by Snyk to avoid a vulnerability