diff --git a/requirements.txt b/requirements.txt
index b97b7b77..55e1f9ef 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -11,3 +11,4 @@ requests==2.20.0
 s3transfer<0.3.0,>=0.2.0
 SQLAlchemy==1.3.2
 tenacity==5.0.2
+werkzeug>=3.0.6 # not directly required, pinned by Snyk to avoid a vulnerability