diff --git a/requirements.txt b/requirements.txt
old mode 100755
new mode 100644
index e20f2e6..615fa62
--- a/requirements.txt
+++ b/requirements.txt
@@ -12,3 +12,4 @@ treelite
 mpds_client
 progressbar
 pg8000
+werkzeug>=3.0.3 # not directly required, pinned by Snyk to avoid a vulnerability