diff --git a/ckan/requirements.in b/ckan/requirements.in
index f84cb2441..047d9314f 100644
--- a/ckan/requirements.in
+++ b/ckan/requirements.in
@@ -102,7 +102,6 @@ sqlparse==0.4.2
 tzlocal==1.3
 unicodecsv>=0.9
 webassets==0.12.1
-Werkzeug==2.0
 # zope.interface==4.7.2
 
 # we are running under gunicorn
@@ -117,3 +116,4 @@ newrelic
 certifi>=2022.12.7
 cryptography>=39.0.1
 redis>=4.5.4
+werkzeug>=2.2.3
diff --git a/ckan/requirements.txt b/ckan/requirements.txt
index 5bfcb490f..52c6a1e8e 100644
--- a/ckan/requirements.txt
+++ b/ckan/requirements.txt
@@ -3,8 +3,8 @@ async-timeout==4.0.2
 Babel==2.9.1
 Beaker==1.11.0
 bleach==3.3.0
-boto3==1.26.104
-botocore==1.29.104
+boto3==1.26.109
+botocore==1.29.109
 certifi==2022.12.7
 cffi==1.15.1
 chardet==3.0.4
@@ -17,12 +17,12 @@ ckanext-dcat @ git+https://github.com/ckan/ckanext-dcat@618928be5a211babafc45103
 ckanext-envvars==0.0.3
 ckanext-geodatagov==0.1.33
 ckanext-googleanalyticsbasic==0.2.0
--e git+https://github.com/ckan/ckanext-harvest.git@89a98d7ff5aa3445d8158921669b8d0b04fa41c3#egg=ckanext_harvest
+-e git+https://github.com/ckan/ckanext-harvest.git@eb73bed1739ac8656d892a609b5ee303e34251ca#egg=ckanext_harvest
 ckanext-metrics-dashboard==0.1.5
 -e git+https://github.com/ckan/ckanext-qa.git@1731b59d2bf82b06f7866c204b26eb7c6c9ea1f9#egg=ckanext_qa
 -e git+https://github.com/ckan/ckanext-report.git@3588577f46d17e5f6ef163bb984d0e7016daef71#egg=ckanext_report
 ckanext-saml2auth @ git+https://github.com/keitaroinc/ckanext-saml2auth.git@b2c6cfc2f9d6179601017f2d6530cf4ee5331f00
--e git+https://github.com/ckan/ckanext-spatial.git@17d5a341cf8f40b35b25df91a18ce72c31195ba3#egg=ckanext_spatial
+-e git+https://github.com/ckan/ckanext-spatial.git@944ae4dd973f37a291514823b27607ea296af05a#egg=ckanext_spatial
 ckantoolkit==0.0.7
 click==7.1.2
 cryptography==40.0.1
@@ -106,7 +106,7 @@ urllib3==1.26.15
 webassets==0.12.1
 webencodings==0.5.1
 WebOb==1.8.7
-Werkzeug==2.0.0
+Werkzeug==2.2.3
 wheel==0.38.4
 xlrd==2.0.1
 xmlschema==2.2.2