diff --git a/requirements.txt b/requirements.txt
index 9c99ad8..c30df9c 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -11,3 +11,4 @@ PyYAML
 configparser==3.5.0
 hca-ingest>=0.6.11
 openpyxl==2.6.2
+werkzeug>=3.0.6 # not directly required, pinned by Snyk to avoid a vulnerability