diff --git a/requirements.txt b/requirements.txt
index 286018f2f..89248aa2a 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -9,7 +9,8 @@ gunicorn
 django-heroku
 whitenoise
 django-allauth
-Jinja2==2.7.2
+Jinja2==3.1.4
 python-etcd==0.4.5
 urllib3==1.25.9
 #test push should not push ddd
+werkzeug>=3.0.3 # not directly required, pinned by Snyk to avoid a vulnerability