diff --git a/requirements/testing.txt b/requirements/testing.txt
index 191fa99c07f5a..6b97f58b235cd 100644
--- a/requirements/testing.txt
+++ b/requirements/testing.txt
@@ -142,3 +142,4 @@ wrapt==1.12.1
 # The following packages are considered to be unsafe in a requirements file:
 # pip
 # setuptools
+werkzeug>=3.0.3 # not directly required, pinned by Snyk to avoid a vulnerability