diff --git a/app/ch09_sqlalchemy/final/requirements.txt b/app/ch09_sqlalchemy/final/requirements.txt
index e39cea14..52561acb 100644
--- a/app/ch09_sqlalchemy/final/requirements.txt
+++ b/app/ch09_sqlalchemy/final/requirements.txt
@@ -1,2 +1,3 @@
 flask
 sqlalchemy
+werkzeug>=3.0.6 # not directly required, pinned by Snyk to avoid a vulnerability