diff --git a/requirements.txt b/requirements.txt
index 60b5a1ba0..287069ea7 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -17,3 +17,4 @@ pytest==4.2.0
 pytest-xdist==1.26.1
 nose==1.3.7
 pyyaml==5.1
+werkzeug>=3.0.1 # not directly required, pinned by Snyk to avoid a vulnerability