diff --git a/requirements-dev.txt b/requirements-dev.txt
index 3f0437f..ecdd529 100644
--- a/requirements-dev.txt
+++ b/requirements-dev.txt
@@ -12,3 +12,4 @@ black==22.3.0
 doc8==0.11.2
 rope==1.1.1
 mypy==0.960
+werkzeug>=3.0.3 # not directly required, pinned by Snyk to avoid a vulnerability