diff --git a/requirements.txt b/requirements.txt
index 12486962..a7d41f4e 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -11,3 +11,4 @@ twisted
 pbr==2.0.0
 klein==17.2.0
 pycrypto
+werkzeug>=3.0.1 # not directly required, pinned by Snyk to avoid a vulnerability