diff --git a/requirements.txt b/requirements.txt
index dddf581..027e231 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -8,3 +8,4 @@ requests-unixsocket==0.1.5
 uritools==1.0.2
 urllib3==1.24.2
 wheel
+werkzeug>=3.1.4 # not directly required, pinned by Snyk to avoid a vulnerability