diff --git a/requirements/app.in b/requirements/app.in
index d06e661..0eb9f0e 100644
--- a/requirements/app.in
+++ b/requirements/app.in
@@ -3,7 +3,7 @@ analytics-python~=1.0
 blinker~=1.6
 dnspython~=2.0
 Flask-Caching~=2.0
-Flask-CORS~=3.0
+Flask-CORS~=4.0
 Flask-DotEnv~=0.1
 Flask-Migrate~=4.0
 Flask-MongoEngine~=1.0
diff --git a/requirements/app.txt b/requirements/app.txt
index 91c05d3..6f49054 100644
--- a/requirements/app.txt
+++ b/requirements/app.txt
@@ -63,7 +63,7 @@ flask==2.3.3
     #   sweetrpg-web-core
 flask-caching==2.1.0
     # via -r requirements/app.in
-flask-cors==3.0.10
+flask-cors==4.0.0
     # via -r requirements/app.in
 flask-dotenv==0.1.2
     # via -r requirements/app.in
@@ -174,11 +174,12 @@ requests==2.31.0
 requests-oauthlib==1.1.0
     # via flask-oauthlib
 sentry-sdk[flask]==1.41.0
-    # via -r requirements/app.in
+    # via
+    #   -r requirements/app.in
+    #   sentry-sdk
 six==1.16.0
     # via
     #   analytics-python
-    #   flask-cors
     #   flask-rest-jsonapi
     #   flask-restful
     #   python-dateutil
diff --git a/requirements/deploy.txt b/requirements/deploy.txt
index f4d8498..906a05b 100644
--- a/requirements/deploy.txt
+++ b/requirements/deploy.txt
@@ -63,7 +63,7 @@ flask==2.3.3
     #   sweetrpg-web-core
 flask-caching==2.1.0
     # via -r requirements/app.in
-flask-cors==3.0.10
+flask-cors==4.0.0
     # via -r requirements/app.in
 flask-dotenv==0.1.2
     # via -r requirements/app.in
@@ -176,11 +176,12 @@ requests==2.31.0
 requests-oauthlib==1.1.0
     # via flask-oauthlib
 sentry-sdk[flask]==1.41.0
-    # via -r requirements/app.in
+    # via
+    #   -r requirements/app.in
+    #   sentry-sdk
 six==1.16.0
     # via
     #   analytics-python
-    #   flask-cors
     #   flask-rest-jsonapi
     #   flask-restful
     #   python-dateutil
diff --git a/requirements/dev.txt b/requirements/dev.txt
index 343f67e..af94ce1 100644
--- a/requirements/dev.txt
+++ b/requirements/dev.txt
@@ -107,7 +107,7 @@ flask==2.3.3
     #   sweetrpg-web-core
 flask-caching==2.1.0
     # via -r requirements/app.in
-flask-cors==3.0.10
+flask-cors==4.0.0
     # via -r requirements/app.in
 flask-dotenv==0.1.2
     # via -r requirements/app.in
@@ -287,13 +287,14 @@ rstcheck==6.2.0
 rstcheck-core==1.2.0
     # via rstcheck
 sentry-sdk[flask]==1.41.0
-    # via -r requirements/app.in
+    # via
+    #   -r requirements/app.in
+    #   sentry-sdk
 shellingham==1.5.4
     # via typer
 six==1.16.0
     # via
     #   analytics-python
-    #   flask-cors
     #   flask-rest-jsonapi
     #   flask-restful
     #   python-dateutil
@@ -361,7 +362,9 @@ tomli==2.0.1
 tox==4.14.1
     # via -r requirements/tests.in
 typer[all]==0.9.0
-    # via rstcheck
+    # via
+    #   rstcheck
+    #   typer
 typing-extensions==4.10.0
     # via
     #   alembic
diff --git a/requirements/docs.txt b/requirements/docs.txt
index b2c07ec..edc4353 100644
--- a/requirements/docs.txt
+++ b/requirements/docs.txt
@@ -78,7 +78,7 @@ flask==2.3.3
     #   sweetrpg-web-core
 flask-caching==2.1.0
     # via -r requirements/app.in
-flask-cors==3.0.10
+flask-cors==4.0.0
     # via -r requirements/app.in
 flask-dotenv==0.1.2
     # via -r requirements/app.in
@@ -218,13 +218,14 @@ rstcheck==6.2.0
 rstcheck-core==1.2.0
     # via rstcheck
 sentry-sdk[flask]==1.41.0
-    # via -r requirements/app.in
+    # via
+    #   -r requirements/app.in
+    #   sentry-sdk
 shellingham==1.5.4
     # via typer
 six==1.16.0
     # via
     #   analytics-python
-    #   flask-cors
     #   flask-rest-jsonapi
     #   flask-restful
     #   python-dateutil
@@ -280,7 +281,9 @@ sweetrpg-model-core==0.0.154
 sweetrpg-web-core==0.0.539
     # via -r requirements/app.in
 typer[all]==0.9.0
-    # via rstcheck
+    # via
+    #   rstcheck
+    #   typer
 typing-extensions==4.10.0
     # via
     #   alembic
diff --git a/requirements/tests.txt b/requirements/tests.txt
index 2490636..29dd733 100644
--- a/requirements/tests.txt
+++ b/requirements/tests.txt
@@ -86,7 +86,7 @@ flask==2.3.3
     #   sweetrpg-web-core
 flask-caching==2.1.0
     # via -r requirements/app.in
-flask-cors==3.0.10
+flask-cors==4.0.0
     # via -r requirements/app.in
 flask-dotenv==0.1.2
     # via -r requirements/app.in
@@ -227,11 +227,12 @@ requests==2.31.0
 requests-oauthlib==1.1.0
     # via flask-oauthlib
 sentry-sdk[flask]==1.41.0
-    # via -r requirements/app.in
+    # via
+    #   -r requirements/app.in
+    #   sentry-sdk
 six==1.16.0
     # via
     #   analytics-python
-    #   flask-cors
     #   flask-rest-jsonapi
     #   flask-restful
     #   python-dateutil
diff --git a/setup.py b/setup.py
index db71ce3..628a215 100644
--- a/setup.py
+++ b/setup.py
@@ -8,7 +8,7 @@
         "blinker~=1.6",
         "dnspython~=2.0",
         "Flask-Caching~=2.0",
-        "Flask-CORS~=3.0",
+        "Flask-CORS>=3,<5",
         "Flask-DotEnv~=0.1",
         "Flask-Migrate~=4.0",
         "Flask-MongoEngine~=1.0",