diff --git a/squatm3-api/requirements.txt b/squatm3-api/requirements.txt
index be1a668..7be712e 100644
--- a/squatm3-api/requirements.txt
+++ b/squatm3-api/requirements.txt
@@ -18,3 +18,5 @@ tzlocal==1.3
 pytz==2018.5
 python-dateutil==2.7.5
 
+urllib3>=2.6.3 # not directly required, pinned by Snyk to avoid a vulnerability
+werkzeug>=3.1.5 # not directly required, pinned by Snyk to avoid a vulnerability