diff --git a/bcol-api/poetry.lock b/bcol-api/poetry.lock
index 9c9c97582..c34f8c2f8 100644
--- a/bcol-api/poetry.lock
+++ b/bcol-api/poetry.lock
@@ -1918,13 +1918,13 @@ zstd = ["zstandard (>=0.18.0)"]
 
 [[package]]
 name = "werkzeug"
-version = "3.0.4"
+version = "3.0.6"
 description = "The comprehensive WSGI web application library."
 optional = false
 python-versions = ">=3.8"
 files = [
-    {file = "werkzeug-3.0.4-py3-none-any.whl", hash = "sha256:02c9eb92b7d6c06f31a782811505d2157837cea66aaede3e217c7c27c039476c"},
-    {file = "werkzeug-3.0.4.tar.gz", hash = "sha256:34f2371506b250df4d4f84bfe7b0921e4762525762bbd936614909fe25cd7306"},
+    {file = "werkzeug-3.0.6-py3-none-any.whl", hash = "sha256:1bc0c2310d2fbb07b1dd1105eba2f7af72f322e1e455f2f93c993bee8c8a5f17"},
+    {file = "werkzeug-3.0.6.tar.gz", hash = "sha256:a8dd59d4de28ca70471a34cba79bed5f7ef2e036a76b3ab0835474246eb41f8d"},
 ]
 
 [package.dependencies]
diff --git a/pay-api/poetry.lock b/pay-api/poetry.lock
index ebbbe77cf..bbadd8175 100644
--- a/pay-api/poetry.lock
+++ b/pay-api/poetry.lock
@@ -2759,13 +2759,13 @@ zstd = ["zstandard (>=0.18.0)"]
 
 [[package]]
 name = "werkzeug"
-version = "3.0.3"
+version = "3.0.6"
 description = "The comprehensive WSGI web application library."
 optional = false
 python-versions = ">=3.8"
 files = [
-    {file = "werkzeug-3.0.3-py3-none-any.whl", hash = "sha256:fc9645dc43e03e4d630d23143a04a7f947a9a3b5727cd535fdfe155a17cc48c8"},
-    {file = "werkzeug-3.0.3.tar.gz", hash = "sha256:097e5bfda9f0aba8da6b8545146def481d06aa7d3266e7448e2cccf67dd8bd18"},
+    {file = "werkzeug-3.0.6-py3-none-any.whl", hash = "sha256:1bc0c2310d2fbb07b1dd1105eba2f7af72f322e1e455f2f93c993bee8c8a5f17"},
+    {file = "werkzeug-3.0.6.tar.gz", hash = "sha256:a8dd59d4de28ca70471a34cba79bed5f7ef2e036a76b3ab0835474246eb41f8d"},
 ]
 
 [package.dependencies]
@@ -2880,4 +2880,4 @@ multidict = ">=4.0"
 [metadata]
 lock-version = "2.0"
 python-versions = "^3.12"
-content-hash = "ce5fd496cc388789db83d3f3024770507cf96dc43562496e9de3805fc0eb18ed"
+content-hash = "d859de1f7155318e97bd5e76b1a73938c91d75e529b67fb74ebb656b3949af10"
diff --git a/pay-api/pyproject.toml b/pay-api/pyproject.toml
index 5b7f8a72e..b38d00ad1 100644
--- a/pay-api/pyproject.toml
+++ b/pay-api/pyproject.toml
@@ -19,7 +19,7 @@ mako = "1.3.2"
 markupsafe = "2.1.5"
 sqlalchemy-utils = "0.41.1"
 sqlalchemy = "2.0.28"
-werkzeug = "3.0.3"
+werkzeug = "^3.0.3"
 alembic = "1.13.1"
 attrs = "23.2.0"
 blinker = "1.7.0"