diff --git a/requirements-web.txt b/requirements-web.txt
index f5f54c0..bb4f7ff 100644
--- a/requirements-web.txt
+++ b/requirements-web.txt
@@ -5,3 +5,4 @@ Flask-Cors==3.0.9
 jieba==0.42.1
 numpy==1.18.4
 rouge
+werkzeug>=3.1.4 # not directly required, pinned by Snyk to avoid a vulnerability