diff --git a/template/python27-flask/requirements.txt b/template/python27-flask/requirements.txt
index cd20441..693061b 100644
--- a/template/python27-flask/requirements.txt
+++ b/template/python27-flask/requirements.txt
@@ -1,2 +1,3 @@
 flask
 
+werkzeug>=3.0.6 # not directly required, pinned by Snyk to avoid a vulnerability