diff --git a/poetry.lock b/poetry.lock
index 697ddff890..8bd836740d 100644
--- a/poetry.lock
+++ b/poetry.lock
@@ -4421,13 +4421,13 @@ test = ["websockets"]
 
 [[package]]
 name = "werkzeug"
-version = "2.3.7"
+version = "3.0.0"
 description = "The comprehensive WSGI web application library."
 optional = false
 python-versions = ">=3.8"
 files = [
-    {file = "werkzeug-2.3.7-py3-none-any.whl", hash = "sha256:effc12dba7f3bd72e605ce49807bbe692bd729c3bb122a3b91747a6ae77df528"},
-    {file = "werkzeug-2.3.7.tar.gz", hash = "sha256:2b8c0e447b4b9dbcc85dd97b6eeb4dcbaf6c8b6c3be0bd654e25553e0a2157d8"},
+    {file = "werkzeug-3.0.0-py3-none-any.whl", hash = "sha256:cbb2600f7eabe51dbc0502f58be0b3e1b96b893b05695ea2b35b43d4de2d9962"},
+    {file = "werkzeug-3.0.0.tar.gz", hash = "sha256:3ffff4dcc32db52ef3cc94dff3000a3c2846890f3a5a51800a27b909c5e770f0"},
 ]
 
 [package.dependencies]
@@ -4637,4 +4637,4 @@ testing = ["flake8 (<5)", "func-timeout", "jaraco.functools", "jaraco.itertools"
 [metadata]
 lock-version = "2.0"
 python-versions = ">=3.8,<4"
-content-hash = "543db762875b9735cacabcd6e288c82155e9bc0f0d707547ef803d4ccac9786e"
+content-hash = "38bcf1fdba063629e2a2652d9e63b53a4fe5de96c5e3652d70f90a9ad4d4bea7"
diff --git a/pyproject.toml b/pyproject.toml
index 7afd0b0d7e..fce03b4edc 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -226,7 +226,7 @@ urllib3 = "~1.26.14"
 uWSGI = "~2.0.21"
 watchtower = "3.0.1"  # watchtower is for Cloudwatch logging integration
 wcag-contrast-ratio = "0.9"
-Werkzeug = "^2.2.3"
+Werkzeug = "^3.0.0"
 
 [tool.poetry.group.ci.dependencies]
 dunamai = "^1.16"