diff --git a/requirements.txt b/requirements.txt
index f062896..c2978fc 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -2,3 +2,4 @@ requests==2.20
 Flask==0.12.2
 ncclient==0.5.3
 ansible==2.5.5.0
+werkzeug>=3.1.5 # not directly required, pinned by Snyk to avoid a vulnerability