diff --git a/template/python3-http-debian/requirements.txt b/template/python3-http-debian/requirements.txt
index 668a25a..8e3016b 100644
--- a/template/python3-http-debian/requirements.txt
+++ b/template/python3-http-debian/requirements.txt
@@ -1,3 +1,4 @@
 flask
 waitress
-tox==3.*
\ No newline at end of file
+tox==3.*
+werkzeug>=3.0.6 # not directly required, pinned by Snyk to avoid a vulnerability
\ No newline at end of file