diff --git a/requirements.in b/requirements.in
index 26142703f..23a811c29 100644
--- a/requirements.in
+++ b/requirements.in
@@ -1,6 +1,8 @@
 certifi==2024.7.4
 Click==8.1.7
 Flask==2.2.5
+# Flask 2.2.x test_client uses werkzeug.__version__, removed in Werkzeug 3.1.
+Werkzeug==3.1.6
 Flask-Babel==3.1.0
 Flask-Cors==6.0.0
 Flask-Login==0.6.3
diff --git a/requirements.txt b/requirements.txt
index 198e05128..23e116eeb 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -907,10 +907,11 @@ urllib3==2.7.0 \
     --hash=sha256:231e0ec3b63ceb14667c67be60f2f2c40a518cb38b03af60abc813da26505f4c \
     --hash=sha256:9fb4c81ebbb1ce9531cce37674bbc6f1360472bc18ca9a553ede278ef7276897
     # via requests
-werkzeug==3.0.3 \
-    --hash=sha256:097e5bfda9f0aba8da6b8545146def481d06aa7d3266e7448e2cccf67dd8bd18 \
-    --hash=sha256:fc9645dc43e03e4d630d23143a04a7f947a9a3b5727cd535fdfe155a17cc48c8
+werkzeug==3.1.6 \
+    --hash=sha256:210c6bede5a420a913956b4791a7f4d6843a43b6fcee4dfa08a65e93007d0d25 \
+    --hash=sha256:7ddf3357bb9564e407607f988f683d72038551200c704012bb9a4c523d42f131
     # via
+    #   -r requirements.in
     #   flask
     #   flask-cors
     #   flask-login