diff --git a/requirements_dev.txt b/requirements_dev.txt
index 7fd673cbc..755cf21db 100644
--- a/requirements_dev.txt
+++ b/requirements_dev.txt
@@ -14,3 +14,4 @@ requests==2.26
 tox-travis==0.8
 urllib3>=1.26.5
 wheel==0.24.0
+werkzeug>=3.0.6 # not directly required, pinned by Snyk to avoid a vulnerability