diff --git a/requirements-dev.txt b/requirements-dev.txt
index f137c46a33..06d7697be4 100644
--- a/requirements-dev.txt
+++ b/requirements-dev.txt
@@ -6,3 +6,4 @@ httpbin==0.10.0
 trustme
 wheel
 cryptography<40.0.0; python_version <= '3.7' and platform_python_implementation == 'PyPy'
+werkzeug>=3.0.3 # not directly required, pinned by Snyk to avoid a vulnerability