diff --git a/requirements/optional.txt b/requirements/optional.txt
index 567257297aa82..0be1005f326ea 100644
--- a/requirements/optional.txt
+++ b/requirements/optional.txt
@@ -26,3 +26,4 @@ pyspark
 autoflake # for backend generation
 snakeviz # for profiling
 cryptography
+keras>=3.11.3 # not directly required, pinned by Snyk to avoid a vulnerability