diff --git a/bindings/python/sdk/batch/requirements.txt b/bindings/python/sdk/batch/requirements.txt
index 3dcb76e58..2eae453d0 100644
--- a/bindings/python/sdk/batch/requirements.txt
+++ b/bindings/python/sdk/batch/requirements.txt
@@ -1,3 +1,4 @@
 dapr>=1.14.0a,<1.15.0
 Flask
-typing-extensions
\ No newline at end of file
+typing-extensions
+werkzeug>=3.0.3 # not directly required, pinned by Snyk to avoid a vulnerability
\ No newline at end of file