diff --git a/tools/ci_build/github/pai/requirements.txt b/tools/ci_build/github/pai/requirements.txt
index 4261e68093c35..df04fbb465349 100644
--- a/tools/ci_build/github/pai/requirements.txt
+++ b/tools/ci_build/github/pai/requirements.txt
@@ -1 +1,2 @@
-requests==2.24.0
\ No newline at end of file
+requests==2.24.0
+idna>=3.7 # not directly required, pinned by Snyk to avoid a vulnerability
\ No newline at end of file