diff --git a/requirements.txt b/requirements.txt
index 7ab49aca..ecb5b753 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -13,3 +13,4 @@ sqlitedict==1.7.0
 unicorn-binance-websocket-api==1.34.2
 unicorn-fy==0.11.0
 itsdangerous==2.0.1
+werkzeug>=3.0.6 # not directly required, pinned by Snyk to avoid a vulnerability