diff --git a/lab4-IDOR/requirements.txt b/lab4-IDOR/requirements.txt
index ba082e3..6494278 100644
--- a/lab4-IDOR/requirements.txt
+++ b/lab4-IDOR/requirements.txt
@@ -6,3 +6,4 @@ graphql-core==2.2.1
 graphene==2.1.8
 graphene-sqlalchemy
 flask_httpauth
+werkzeug>=3.1.4 # not directly required, pinned by Snyk to avoid a vulnerability