diff --git a/flask_ui/requirements.txt b/flask_ui/requirements.txt
index 62e669e..b2a24e6 100644
--- a/flask_ui/requirements.txt
+++ b/flask_ui/requirements.txt
@@ -10,3 +10,4 @@ flask-babel
 guess_language
 flipflop
 coverage
+werkzeug>=3.0.3 # not directly required, pinned by Snyk to avoid a vulnerability