diff --git a/CHANGELOG.md b/CHANGELOG.md
index 3f5b3ca0bc3..77daa14ce72 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,3 +1,11 @@
+## dbt 0.19.1 (Release TBD)
+
+### Under the hood
+- Bump werkzeug upper bound dependency to <v2.0 ([#3011](https://github.com/fishtown-analytics/dbt/pull/3011))
+
+Contributors:
+- [@Bl3f](https://github.com/Bl3f) ([#3011](https://github.com/fishtown-analytics/dbt/pull/3011))
+
 ## dbt 0.19.0 (Release TBD)
 
 ### Under the hood
diff --git a/core/setup.py b/core/setup.py
index df52439a623..21bc59e5b3b 100644
--- a/core/setup.py
+++ b/core/setup.py
@@ -68,7 +68,7 @@ def read(fname):
         'agate>=1.6,<2',
         'isodate>=0.6,<0.7',
         'json-rpc>=1.12,<2',
-        'werkzeug>=0.15,<0.17',
+        'werkzeug>=0.15,<2.0',
         'dataclasses==0.6;python_version<"3.7"',
         'hologram==0.0.12',
         'logbook>=1.5,<1.6',