diff --git a/requirements-dev.txt b/requirements-dev.txt
index 5b398673d..acf7df38a 100644
--- a/requirements-dev.txt
+++ b/requirements-dev.txt
@@ -23,3 +23,4 @@ arrow<0.14.0
 colour
 email-validator
 wtforms==2.3.3
+werkzeug>=3.1.4 # not directly required, pinned by Snyk to avoid a vulnerability