diff --git a/app/ch12-forms/starter/requirements.txt b/app/ch12-forms/starter/requirements.txt
index 9cf703d9..9cf56f6a 100644
--- a/app/ch12-forms/starter/requirements.txt
+++ b/app/ch12-forms/starter/requirements.txt
@@ -4,3 +4,4 @@ sqlalchemy
 progressbar2
 python-dateutil
 
+werkzeug>=3.0.6 # not directly required, pinned by Snyk to avoid a vulnerability