addressing vulnerability report in research project deps
This PR addresses this security alert:
https://github.com/huggingface/transformers/security/dependabot/examples/research_projects/lxmert/requirements.txt/Pillow/open

@LysandreJik