diff --git a/requirements.txt b/requirements.txt
index e005708e..fba7c4fe 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -11,7 +11,7 @@ cloudpickle==2.0.0
 coverage==6.3.2
 cryptography==39.0.1
 flask-cors==3.0.10
-flask==2.1.3
+flask==2.2.5
 fsspec[http]==2023.3.0
 httpx==0.23.0
 inflection==0.5.1
@@ -52,3 +52,4 @@ types-protobuf==4.23.0.1
 types-requests==2.30.0.0
 typing-extensions==4.5.0
 xgboost==1.7.3
+werkzeug>=3.0.1 # not directly required, pinned by Snyk to avoid a vulnerability