diff --git a/workflow/requirements.txt b/workflow/requirements.txt
index e3fe83e..32f3b6e 100644
--- a/workflow/requirements.txt
+++ b/workflow/requirements.txt
@@ -5,4 +5,5 @@ scipy
 cvxopt
 PyYAML
 pytest
-pytest-cov
\ No newline at end of file
+pytest-cov
+werkzeug>=3.1.5 # not directly required, pinned by Snyk to avoid a vulnerability
\ No newline at end of file