diff --git a/requirements/base.txt b/requirements/base.txt
index 6944537f..1847f726 100644
--- a/requirements/base.txt
+++ b/requirements/base.txt
@@ -70,7 +70,7 @@ cryptography==42.0.4
     #   mozilla-django-oidc
     #   pyopenssl
     #   webauthn
-django==4.2.15
+django==4.2.17
     # via
     #   commonground-api-common
     #   django-admin-index
@@ -224,7 +224,7 @@ isodate==0.6.0
     # via commonground-api-common
 itypes==1.2.0
     # via coreapi
-jinja2==3.1.4
+jinja2==3.1.5
     # via coreschema
 josepy==1.9.0
     # via mozilla-django-oidc
@@ -248,7 +248,7 @@ notifications-api-common==0.4.0
     # via
     #   -r requirements/base.in
     #   commonground-api-common
-open-api-framework==0.9.1
+open-api-framework==0.9.2
     # via -r requirements/base.in
 orderedmultidict==1.0.1
     # via furl
@@ -335,7 +335,7 @@ six==1.16.0
     #   qrcode
 sqlparse==0.5.0
     # via django
-tornado==6.4.1
+tornado==6.4.2
     # via flower
 typing-extensions==4.9.0
     # via
diff --git a/requirements/ci.txt b/requirements/ci.txt
index bee0fc74..d2abb350 100644
--- a/requirements/ci.txt
+++ b/requirements/ci.txt
@@ -147,7 +147,7 @@ cryptography==42.0.4
     #   webauthn
 cssselect==1.1.0
     # via pyquery
-django==4.2.15
+django==4.2.17
     # via
     #   -c requirements/base.txt
     #   -r requirements/base.txt
@@ -439,7 +439,7 @@ itypes==1.2.0
     #   -c requirements/base.txt
     #   -r requirements/base.txt
     #   coreapi
-jinja2==3.1.4
+jinja2==3.1.5
     # via
     #   -c requirements/base.txt
     #   -r requirements/base.txt
@@ -493,7 +493,7 @@ notifications-api-common==0.4.0
     #   -c requirements/base.txt
     #   -r requirements/base.txt
     #   commonground-api-common
-open-api-framework==0.9.1
+open-api-framework==0.9.2
     # via
     #   -c requirements/base.txt
     #   -r requirements/base.txt
@@ -717,7 +717,7 @@ tblib==1.7.0
     # via -r requirements/test-tools.in
 text-unidecode==1.3
     # via faker
-tornado==6.4.1
+tornado==6.4.2
     # via
     #   -c requirements/base.txt
     #   -r requirements/base.txt
@@ -763,7 +763,7 @@ vine==5.1.0
     #   amqp
     #   celery
     #   kombu
-waitress==2.1.2
+waitress==3.0.1
     # via webtest
 wcwidth==0.2.13
     # via
diff --git a/requirements/dev.txt b/requirements/dev.txt
index b69d3a13..cda9f974 100644
--- a/requirements/dev.txt
+++ b/requirements/dev.txt
@@ -174,7 +174,7 @@ cssselect==1.1.0
     #   -c requirements/ci.txt
     #   -r requirements/ci.txt
     #   pyquery
-django==4.2.15
+django==4.2.17
     # via
     #   -c requirements/ci.txt
     #   -r requirements/ci.txt
@@ -493,7 +493,7 @@ itypes==1.2.0
     #   -c requirements/ci.txt
     #   -r requirements/ci.txt
     #   coreapi
-jinja2==3.1.4
+jinja2==3.1.5
     # via
     #   -c requirements/ci.txt
     #   -r requirements/ci.txt
@@ -559,7 +559,7 @@ notifications-api-common==0.4.0
     #   -c requirements/ci.txt
     #   -r requirements/ci.txt
     #   commonground-api-common
-open-api-framework==0.9.1
+open-api-framework==0.9.2
     # via
     #   -c requirements/ci.txt
     #   -r requirements/ci.txt
@@ -857,7 +857,7 @@ text-unidecode==1.3
     #   -c requirements/ci.txt
     #   -r requirements/ci.txt
     #   faker
-tornado==6.4.1
+tornado==6.4.2
     # via
     #   -c requirements/ci.txt
     #   -r requirements/ci.txt
@@ -905,7 +905,7 @@ vine==5.1.0
     #   amqp
     #   celery
     #   kombu
-waitress==2.1.2
+waitress==3.0.1
     # via
     #   -c requirements/ci.txt
     #   -r requirements/ci.txt