diff --git a/poetry.lock b/poetry.lock
index dabbf80d30..b0ec4e365a 100644
--- a/poetry.lock
+++ b/poetry.lock
@@ -1443,7 +1443,7 @@ requests = ">=2.0.0"
 
 [[package]]
 name = "notifications-utils"
-version = "52.2.4"
+version = "52.2.6"
 description = "Shared python code for Notification - Provides logging utils etc."
 optional = false
 python-versions = "~3.10.9"
@@ -1473,13 +1473,13 @@ PyYAML = "6.0.1"
 requests = "2.31.0"
 smartypants = "2.0.1"
 statsd = "3.3.0"
-werkzeug = "2.3.7"
+werkzeug = "3.0.3"
 
 [package.source]
 type = "git"
 url = "https://github.com/cds-snc/notifier-utils.git"
-reference = "52.2.4"
-resolved_reference = "1e2c279333ee1b86671b82d8f562bb3e98446500"
+reference = "52.2.6"
+resolved_reference = "d67d77609378d0e6e33305a007806d32566e21a1"
 
 [[package]]
 name = "openpyxl"
@@ -2354,13 +2354,13 @@ files = [
 
 [[package]]
 name = "werkzeug"
-version = "2.3.7"
+version = "3.0.3"
 description = "The comprehensive WSGI web application library."
 optional = false
 python-versions = ">=3.8"
 files = [
-    {file = "werkzeug-2.3.7-py3-none-any.whl", hash = "sha256:effc12dba7f3bd72e605ce49807bbe692bd729c3bb122a3b91747a6ae77df528"},
-    {file = "werkzeug-2.3.7.tar.gz", hash = "sha256:2b8c0e447b4b9dbcc85dd97b6eeb4dcbaf6c8b6c3be0bd654e25553e0a2157d8"},
+    {file = "werkzeug-3.0.3-py3-none-any.whl", hash = "sha256:fc9645dc43e03e4d630d23143a04a7f947a9a3b5727cd535fdfe155a17cc48c8"},
+    {file = "werkzeug-3.0.3.tar.gz", hash = "sha256:097e5bfda9f0aba8da6b8545146def481d06aa7d3266e7448e2cccf67dd8bd18"},
 ]
 
 [package.dependencies]
@@ -2476,4 +2476,4 @@ testing = ["coverage (>=5.0.3)", "zope.event", "zope.testing"]
 [metadata]
 lock-version = "2.0"
 python-versions = "~3.10.9"
-content-hash = "ddc978fe2f5c973e21db582949903fa3ba76a5f05f1ef363e4d2c4e4353e4aa1"
+content-hash = "9a104ed38ced7279bb634847d65967afce4899afdc17d27b868287ba9c58eed4"
diff --git a/pyproject.toml b/pyproject.toml
index 9d9d8639ea..f24bf42b83 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -46,14 +46,14 @@ ua-parser = "0.18.0"
 user-agents = "2.2.0"
 WTForms = "3.1.2"
 email-validator = "1.3.1"
-Werkzeug = "2.3.7"
+Werkzeug = "3.0.3"
 greenlet = "2.0.2"
 mixpanel = "4.10.1"
 unidecode = "^1.3.6"
 
 # PaaS
 awscli-cwlogs = "^1.4.6"
-notifications-utils = { git = "https://github.com/cds-snc/notifier-utils.git", tag = "52.2.4" }
+notifications-utils = { git = "https://github.com/cds-snc/notifier-utils.git", tag = "52.2.6" }
 
 # Pinned dependencies
 rsa = "^4.1" # not directly required, pinned by Snyk to avoid a vulnerability