diff --git a/app/requirements.txt b/app/requirements.txt
index 3167650..a48b0c1 100644
--- a/app/requirements.txt
+++ b/app/requirements.txt
@@ -2,4 +2,5 @@ fastapi
 sqlalchemy
 flask_bcrypt
 uuid
-uvicorn
\ No newline at end of file
+uvicorn
+werkzeug>=3.0.1 # not directly required, pinned by Snyk to avoid a vulnerability
\ No newline at end of file