diff --git a/builders/testdata/python/requirements_txt/requirements.txt b/builders/testdata/python/requirements_txt/requirements.txt
index 2ec18e914..621fa2a81 100644
--- a/builders/testdata/python/requirements_txt/requirements.txt
+++ b/builders/testdata/python/requirements_txt/requirements.txt
@@ -1 +1,2 @@
 flask==1.1.1
+werkzeug>=3.1.4 # not directly required, pinned by Snyk to avoid a vulnerability