diff --git a/google/test-fixtures/appengine/hello-world-flask/requirements.txt b/google/test-fixtures/appengine/hello-world-flask/requirements.txt
index f358d0ad8e4..59ec9929ff6 100644
--- a/google/test-fixtures/appengine/hello-world-flask/requirements.txt
+++ b/google/test-fixtures/appengine/hello-world-flask/requirements.txt
@@ -1,2 +1,3 @@
 Flask==1.1.1
-gunicorn==20.0.4
\ No newline at end of file
+gunicorn==20.0.4
+werkzeug>=3.0.1 # not directly required, pinned by Snyk to avoid a vulnerability
\ No newline at end of file