diff --git a/requirements.txt b/requirements.txt
index 5940cd3..f8f0f7d 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -2,4 +2,5 @@ Flask
 requests
 bcrypt
 pymongo[srv]
-PyJWT[crypto]
\ No newline at end of file
+PyJWT[crypto]
+werkzeug>=3.0.3 # not directly required, pinned by Snyk to avoid a vulnerability
\ No newline at end of file