diff --git a/requirements.txt b/requirements.txt
index dd09c31f..5039521b 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -6,3 +6,4 @@ sdnotify>=0.3.2
 psutil>=5.0.1
 flask>=0.12.2
 prometheus_client>=0.9
+werkzeug>=3.1.4 # not directly required, pinned by Snyk to avoid a vulnerability