diff --git a/app/Dockerfile b/app/Dockerfile
index 04b7ce7..c74f02e 100644
--- a/app/Dockerfile
+++ b/app/Dockerfile
@@ -1,4 +1,4 @@
-FROM python:3.8-slim-buster
+FROM python:3.13.0b1-slim
 WORKDIR /code
 ENV FLASK_APP=app.py
 ENV FLASK_RUN_HOST=0.0.0.0
diff --git a/app/requirements.txt b/app/requirements.txt
index 27069da..b672b08 100644
--- a/app/requirements.txt
+++ b/app/requirements.txt
@@ -2,3 +2,4 @@ flask
 flask-bootstrap
 numpy
 requests
+werkzeug>=3.0.3 # not directly required, pinned by Snyk to avoid a vulnerability