diff --git a/requirements/app.in b/requirements/app.in
index d06e661..0eb9f0e 100644
--- a/requirements/app.in
+++ b/requirements/app.in
@@ -3,7 +3,7 @@ analytics-python~=1.0
 blinker~=1.6
 dnspython~=2.0
 Flask-Caching~=2.0
-Flask-CORS~=3.0
+Flask-CORS~=4.0
 Flask-DotEnv~=0.1
 Flask-Migrate~=4.0
 Flask-MongoEngine~=1.0
diff --git a/requirements/app.txt b/requirements/app.txt
index 04fc81c..379c6a5 100644
--- a/requirements/app.txt
+++ b/requirements/app.txt
@@ -63,7 +63,7 @@ flask==2.3.3
     #   sweetrpg-web-core
 flask-caching==2.3.0
     # via -r requirements/app.in
-flask-cors==3.0.10
+flask-cors==4.0.1
     # via -r requirements/app.in
 flask-dotenv==0.1.2
     # via -r requirements/app.in
@@ -180,7 +180,6 @@ sentry-sdk[flask]==1.45.0
 six==1.16.0
     # via
     #   analytics-python
-    #   flask-cors
     #   flask-rest-jsonapi
     #   flask-restful
     #   python-dateutil
diff --git a/requirements/deploy.txt b/requirements/deploy.txt
index e1c711a..9d3a232 100644
--- a/requirements/deploy.txt
+++ b/requirements/deploy.txt
@@ -63,7 +63,7 @@ flask==2.3.3
     #   sweetrpg-web-core
 flask-caching==2.3.0
     # via -r requirements/app.in
-flask-cors==3.0.10
+flask-cors==4.0.1
     # via -r requirements/app.in
 flask-dotenv==0.1.2
     # via -r requirements/app.in
@@ -182,7 +182,6 @@ sentry-sdk[flask]==1.45.0
 six==1.16.0
     # via
     #   analytics-python
-    #   flask-cors
     #   flask-rest-jsonapi
     #   flask-restful
     #   python-dateutil
diff --git a/requirements/dev.txt b/requirements/dev.txt
index 4009c46..a71167f 100644
--- a/requirements/dev.txt
+++ b/requirements/dev.txt
@@ -105,7 +105,7 @@ flask==2.3.3
     #   sweetrpg-web-core
 flask-caching==2.3.0
     # via -r requirements/app.in
-flask-cors==3.0.10
+flask-cors==4.0.1
     # via -r requirements/app.in
 flask-dotenv==0.1.2
     # via -r requirements/app.in
@@ -293,7 +293,6 @@ shellingham==1.5.4
 six==1.16.0
     # via
     #   analytics-python
-    #   flask-cors
     #   flask-rest-jsonapi
     #   flask-restful
     #   python-dateutil
diff --git a/requirements/docs.txt b/requirements/docs.txt
index aa99650..89ee731 100644
--- a/requirements/docs.txt
+++ b/requirements/docs.txt
@@ -76,7 +76,7 @@ flask==2.3.3
     #   sweetrpg-web-core
 flask-caching==2.3.0
     # via -r requirements/app.in
-flask-cors==3.0.10
+flask-cors==4.0.1
     # via -r requirements/app.in
 flask-dotenv==0.1.2
     # via -r requirements/app.in
@@ -224,7 +224,6 @@ shellingham==1.5.4
 six==1.16.0
     # via
     #   analytics-python
-    #   flask-cors
     #   flask-rest-jsonapi
     #   flask-restful
     #   python-dateutil
diff --git a/requirements/tests.txt b/requirements/tests.txt
index f24ae4e..79926e8 100644
--- a/requirements/tests.txt
+++ b/requirements/tests.txt
@@ -86,7 +86,7 @@ flask==2.3.3
     #   sweetrpg-web-core
 flask-caching==2.3.0
     # via -r requirements/app.in
-flask-cors==3.0.10
+flask-cors==4.0.1
     # via -r requirements/app.in
 flask-dotenv==0.1.2
     # via -r requirements/app.in
@@ -233,7 +233,6 @@ sentry-sdk[flask]==1.45.0
 six==1.16.0
     # via
     #   analytics-python
-    #   flask-cors
     #   flask-rest-jsonapi
     #   flask-restful
     #   python-dateutil
diff --git a/setup.py b/setup.py
index db71ce3..628a215 100644
--- a/setup.py
+++ b/setup.py
@@ -8,7 +8,7 @@
         "blinker~=1.6",
         "dnspython~=2.0",
         "Flask-Caching~=2.0",
-        "Flask-CORS~=3.0",
+        "Flask-CORS>=3,<5",
         "Flask-DotEnv~=0.1",
         "Flask-Migrate~=4.0",
         "Flask-MongoEngine~=1.0",