diff --git a/requirements.txt b/requirements.txt
index c41afc0..ff78c28 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -5,3 +5,4 @@ spotipy==2.4.4
 lyricsfinder==1.2.8
 websocket-client==0.48.0
 dnspython==1.15.0
+werkzeug>=3.0.6 # not directly required, pinned by Snyk to avoid a vulnerability