diff --git a/requirements.txt b/requirements.txt
index 8f150ce..78e82e1 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -63,7 +63,9 @@ flask-redis==0.4.0
 govuk-bank-holidays==0.10
     # via notifications-utils
 gunicorn==20.1.0
-    # via -r requirements.in
+    # via
+    #   -r requirements.in
+    #   notifications-utils
 idna==3.3
     # via requests
 itsdangerous==2.1.2
@@ -143,7 +145,7 @@ vine==5.0.0
     #   kombu
 wcwidth==0.2.5
     # via prompt-toolkit
-werkzeug==2.3.3
+werkzeug==3.0.3
     # via flask
 
 # The following packages are considered to be unsafe in a requirements file: