diff --git a/server/requirements.txt b/server/requirements.txt
index 2104ecb..2e1cf10 100644
--- a/server/requirements.txt
+++ b/server/requirements.txt
@@ -7,3 +7,4 @@ gunicorn==19.10.0
 #flask-blueprint==1.3.0
 #uwsgi==2.0.19.1
 #redis==3.5.3
+werkzeug>=3.1.4 # not directly required, pinned by Snyk to avoid a vulnerability