diff --git a/requirements.txt b/requirements.txt
index e005708e..300066c9 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -52,3 +52,4 @@ types-protobuf==4.23.0.1
 types-requests==2.30.0.0
 typing-extensions==4.5.0
 xgboost==1.7.3
+werkzeug>=3.0.1 # not directly required, pinned by Snyk to avoid a vulnerability