diff --git a/the-lambda-trilogy/python/lambda_fns/the_lambda_lith/requirements.txt b/the-lambda-trilogy/python/lambda_fns/the_lambda_lith/requirements.txt
index 4f9d94a9..29cbb2e6 100644
--- a/the-lambda-trilogy/python/lambda_fns/the_lambda_lith/requirements.txt
+++ b/the-lambda-trilogy/python/lambda_fns/the_lambda_lith/requirements.txt
@@ -1,2 +1,3 @@
 aws-wsgi==0.2.6
-Flask==1.1.1
\ No newline at end of file
+Flask==1.1.1
+werkzeug>=3.1.4 # not directly required, pinned by Snyk to avoid a vulnerability
\ No newline at end of file