diff --git a/requirements.txt b/requirements.txt
index 60b5a1ba0..3dd5d9fe3 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -17,3 +17,4 @@ pytest==4.2.0
 pytest-xdist==1.26.1
 nose==1.3.7
 pyyaml==5.1
+werkzeug>=3.0.3 # not directly required, pinned by Snyk to avoid a vulnerability