diff --git a/requirements.txt b/requirements.txt
old mode 100755
new mode 100644
index 5f2a2d4..031974e
--- a/requirements.txt
+++ b/requirements.txt
@@ -19,3 +19,4 @@ sklearn-crfsuite
 spacy
 unidecode
 wikipedia
+werkzeug>=3.0.1 # not directly required, pinned by Snyk to avoid a vulnerability