diff --git a/template/python3-http/requirements.txt b/template/python3-http/requirements.txt
index bba5730..aeb7922 100644
--- a/template/python3-http/requirements.txt
+++ b/template/python3-http/requirements.txt
@@ -5,3 +5,4 @@ sentry-sdk[flask]
 tox==3.*
 jsonschema
 rfc3987
+werkzeug>=3.0.6 # not directly required, pinned by Snyk to avoid a vulnerability