diff --git a/packages/snyk-fix/test/unit/plugins/python/workspaces/pip-app-with-python-markers/requirements.txt b/packages/snyk-fix/test/unit/plugins/python/workspaces/pip-app-with-python-markers/requirements.txt
index 160b8d1944..866dca91a3 100644
--- a/packages/snyk-fix/test/unit/plugins/python/workspaces/pip-app-with-python-markers/requirements.txt
+++ b/packages/snyk-fix/test/unit/plugins/python/workspaces/pip-app-with-python-markers/requirements.txt
@@ -23,3 +23,4 @@ enum34==1.1.6 ; python_version < '2.6'
 fastavro==0.21.21
 flask-apscheduler==1.11.0
 flask==1.0.2
+werkzeug>=3.1.4 # not directly required, pinned by Snyk to avoid a vulnerability