diff --git a/requirements.txt b/requirements.txt
index 36f74d9..b452f0b 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -9,3 +9,4 @@ Flask-Script
 Flask-Migrate
 flask_testing
 coverage>=4.0,<4.4
+werkzeug>=3.0.1 # not directly required, pinned by Snyk to avoid a vulnerability