diff --git a/donations/poetry.lock b/donations/poetry.lock
index e82789437..172fcdc43 100644
--- a/donations/poetry.lock
+++ b/donations/poetry.lock
@@ -1290,13 +1290,13 @@ files = [
 
 [[package]]
 name = "werkzeug"
-version = "2.3.8"
+version = "3.0.3"
 description = "The comprehensive WSGI web application library."
 optional = false
 python-versions = ">=3.8"
 files = [
-    {file = "werkzeug-2.3.8-py3-none-any.whl", hash = "sha256:bba1f19f8ec89d4d607a3bd62f1904bd2e609472d93cd85e9d4e178f472c3748"},
-    {file = "werkzeug-2.3.8.tar.gz", hash = "sha256:554b257c74bbeb7a0d254160a4f8ffe185243f52a52035060b761ca62d977f03"},
+    {file = "werkzeug-3.0.3-py3-none-any.whl", hash = "sha256:fc9645dc43e03e4d630d23143a04a7f947a9a3b5727cd535fdfe155a17cc48c8"},
+    {file = "werkzeug-3.0.3.tar.gz", hash = "sha256:097e5bfda9f0aba8da6b8545146def481d06aa7d3266e7448e2cccf67dd8bd18"},
 ]
 
 [package.dependencies]
@@ -1342,4 +1342,4 @@ testing = ["big-O", "jaraco.functools", "jaraco.itertools", "more-itertools", "p
 [metadata]
 lock-version = "2.0"
 python-versions = "^3.8"
-content-hash = "805290527474b24bc8f8d99ed06128eec8a68c08a6d01a6143039649f4cab839"
+content-hash = "3eaebb75045bf37ea15ddcb6baebaca10fc0421e8a8d8dd947fb0705d6002f20"
diff --git a/donations/pyproject.toml b/donations/pyproject.toml
index 6942e5504..e5cb0bc73 100644
--- a/donations/pyproject.toml
+++ b/donations/pyproject.toml
@@ -13,7 +13,7 @@ flask = "2.0.3"
 pyln-client = "^23.11"
 flask-bootstrap = "^3.3.7.1"
 flask-wtf = "0.15.1"
-werkzeug = "<3"
+werkzeug = "<4"
 wtforms = "2.3.3"
 
 [tool.poetry.dev-dependencies]