diff --git a/tolqc-api/requirements-test.txt b/tolqc-api/requirements-test.txt
index c05972f..8f39bc4 100644
--- a/tolqc-api/requirements-test.txt
+++ b/tolqc-api/requirements-test.txt
@@ -4,3 +4,4 @@
 
 flask_testing==0.8.1
 pytest==7.3.1
+werkzeug>=3.0.1 # not directly required, pinned by Snyk to avoid a vulnerability