diff --git a/samples/openapi3/server/petstore/python-flask/test-requirements.txt b/samples/openapi3/server/petstore/python-flask/test-requirements.txt
index 0970f28c7c5a..cfb4577314a1 100644
--- a/samples/openapi3/server/petstore/python-flask/test-requirements.txt
+++ b/samples/openapi3/server/petstore/python-flask/test-requirements.txt
@@ -2,3 +2,4 @@ pytest~=4.6.7 # needed for python 2.7+3.4
 pytest-cov>=2.8.1
 pytest-randomly==1.2.3 # needed for python 2.7+3.4
 Flask-Testing==0.8.0
+werkzeug>=3.0.6 # not directly required, pinned by Snyk to avoid a vulnerability