diff --git a/requirements-to-freeze.txt b/requirements-to-freeze.txt
index 1478f42..3503364 100644
--- a/requirements-to-freeze.txt
+++ b/requirements-to-freeze.txt
@@ -4,3 +4,4 @@ twilio
 # development
 flake8
 black
+werkzeug>=3.0.1 # not directly required, pinned by Snyk to avoid a vulnerability