diff --git a/tools/scheduler/requirements.txt b/tools/scheduler/requirements.txt
index d4d47e6e..6a8f629c 100644
--- a/tools/scheduler/requirements.txt
+++ b/tools/scheduler/requirements.txt
@@ -1,2 +1,3 @@
 flask
 google-api-python-client
+werkzeug>=3.0.3 # not directly required, pinned by Snyk to avoid a vulnerability