diff --git a/web_interface/requirements.txt b/web_interface/requirements.txt
index f04386e7..223a0b83 100644
--- a/web_interface/requirements.txt
+++ b/web_interface/requirements.txt
@@ -4,6 +4,7 @@
 
 # Web framework
 flask>=3.1.3,<4.0.0
+werkzeug>=3.1.6,<4.0.0  # Flask transitive; pinned to keep a security floor above Flask's own >=3.1.0
 flask-limiter>=3.5.0,<4.0.0  # Rate limiting (prevent accidental abuse)
 flask-compress>=1.14  # gzip/brotli response compression (big win for the large JS/HTML over WiFi)
 jinja2>=3.1.0,<4.0.0  # Flask transitive, but imported directly (TemplateNotFound)