diff --git a/requirements/base.txt b/requirements/base.txt
index fb356af..04d6852 100644
--- a/requirements/base.txt
+++ b/requirements/base.txt
@@ -2,3 +2,4 @@ nameko>=2.12
 statsd>=3.2.1
 six>=1.10.0
 mock>=2.0.0
+werkzeug>=3.0.6 # not directly required, pinned by Snyk to avoid a vulnerability