diff --git a/CHANGELOG.md b/CHANGELOG.md
index a3836b4..4056b39 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -9,6 +9,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ## [0.7.3](https://github.com/airbus-cyber/iris-httpsend-module/compare/0.7.2...0.7.3)
 ### Bug Fixes
 * patch to update users' groups from ldap does not fail when login a user with no groups declared in ldap
+* added patch to limit Werkzeug version under 3
 
 
 ## [0.7.2](https://github.com/airbus-cyber/iris-httpsend-module/compare/0.7.1...0.7.2)
diff --git a/patches/werkzeug_version.patch b/patches/werkzeug_version.patch
new file mode 100644
index 0000000..84d740e
--- /dev/null
+++ b/patches/werkzeug_version.patch
@@ -0,0 +1,13 @@
+diff --git a/source/requirements.txt b/source/requirements.txt
+index 780582d7..669c34ca 100644
+--- a/source/requirements.txt
++++ b/source/requirements.txt
+@@ -19,7 +19,7 @@ SQLAlchemy==1.4.31
+ SQLAlchemy-ImageAttach==1.1.0
+ SQLAlchemy-Utils==0.38.2
+ urllib3==1.26.5
+-Werkzeug>=2.2.3
++Werkzeug>=2.2.3,<3.0.0
+ WTForms==2.2.1
+ flask-socketio==5.1.1
+ eventlet==0.30.2