diff --git a/detection/scrfd/requirements/optional.txt b/detection/scrfd/requirements/optional.txt
old mode 100755
new mode 100644
index 6654b5b96..8819d6e4f
--- a/detection/scrfd/requirements/optional.txt
+++ b/detection/scrfd/requirements/optional.txt
@@ -2,3 +2,4 @@ albumentations>=0.3.2
 cityscapesscripts
 imagecorruptions
 mmlvis
+pillow>=8.3.2 # not directly required, pinned by Snyk to avoid a vulnerability