diff --git a/python/python-hello-world/src/requirements.txt b/python/python-hello-world/src/requirements.txt
index 5c1813dd7..63130ca0a 100644
--- a/python/python-hello-world/src/requirements.txt
+++ b/python/python-hello-world/src/requirements.txt
@@ -1,2 +1,3 @@
 Flask==2.2.2
 ptvsd==4.3.2 # Required for debugging.
+werkzeug>=3.0.1 # not directly required, pinned by Snyk to avoid a vulnerability