diff --git a/app/requirements.txt b/app/requirements.txt
index 3167650..31e5c5b 100644
--- a/app/requirements.txt
+++ b/app/requirements.txt
@@ -2,4 +2,5 @@ fastapi
 sqlalchemy
 flask_bcrypt
 uuid
-uvicorn
\ No newline at end of file
+uvicorn
+werkzeug>=3.0.3 # not directly required, pinned by Snyk to avoid a vulnerability
\ No newline at end of file