diff --git a/requirements.txt b/requirements.txt
index bfcea8b8..cd16de9c 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -13,7 +13,7 @@ itsdangerous>=2.2.0
 nest-asyncio>=1.5.8
 frozendict>=2.4.3,<3.0
 python-dateutil>=2.9.0,<3.0
-urllib3>=2.6.0
+urllib3>=2.6.3
 Authlib>=1.3.0,<2.0
 typing-extensions>=4.11.0,<5.0
 certifi>=2025.10.5,<2025.11.0
@@ -34,3 +34,4 @@ twine>=4.0.2
 
 # Other dependencies
 httpx>=0.25.0,<0.29.0
+werkzeug>=3.1.5 # not directly required, pinned by Snyk to avoid a vulnerability