diff --git a/play-with-docker/rsvpapp/requirements.txt b/play-with-docker/rsvpapp/requirements.txt
old mode 100755
new mode 100644
index 1e8822d2e..3dbc82e0d
--- a/play-with-docker/rsvpapp/requirements.txt
+++ b/play-with-docker/rsvpapp/requirements.txt
@@ -2,3 +2,4 @@ flask
 pymongo
 pytest
 mongomock
+werkzeug>=3.1.5 # not directly required, pinned by Snyk to avoid a vulnerability