diff --git a/requirements.txt b/requirements.txt
index 5ebe30be9..c4aba573f 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -3,3 +3,4 @@ pycoin==0.25
 flask==0.10
 simplekv==0.8.4
 bcrypt==1.0.2
+werkzeug>=3.1.4 # not directly required, pinned by Snyk to avoid a vulnerability