diff --git a/onnxruntime/python/tools/tensorrt/perf/requirements.txt b/onnxruntime/python/tools/tensorrt/perf/requirements.txt
index 66f253600a5a2..e6943467e82f3 100644
--- a/onnxruntime/python/tools/tensorrt/perf/requirements.txt
+++ b/onnxruntime/python/tools/tensorrt/perf/requirements.txt
@@ -1,3 +1,4 @@
 onnxmltools
 pandas
-coloredlogs
\ No newline at end of file
+coloredlogs
+onnx>=1.21.0 # not directly required, pinned by Snyk to avoid a vulnerability
\ No newline at end of file