diff --git a/sample-app/redisearch-python-rest/requirements.txt b/sample-app/redisearch-python-rest/requirements.txt
index 086a31f..b568f59 100644
--- a/sample-app/redisearch-python-rest/requirements.txt
+++ b/sample-app/redisearch-python-rest/requirements.txt
@@ -2,3 +2,4 @@ redis>=4.3.3
 Flask>=2.1.2
 python-dotenv==0.20.0
 Flask-Cors>=3.0.10
+werkzeug>=3.0.1 # not directly required, pinned by Snyk to avoid a vulnerability