diff --git a/payment/requirements.txt b/payment/requirements.txt
index f3b5713..a63bd28 100644
--- a/payment/requirements.txt
+++ b/payment/requirements.txt
@@ -5,3 +5,4 @@ pika
 prometheus_client
 opentracing
 instana
+werkzeug>=3.0.6 # not directly required, pinned by Snyk to avoid a vulnerability