diff --git a/poetry.lock b/poetry.lock
index 51f3b122..92c17f0f 100644
--- a/poetry.lock
+++ b/poetry.lock
@@ -1744,13 +1744,13 @@ zstd = ["zstandard (>=0.18.0)"]
 
 [[package]]
 name = "werkzeug"
-version = "2.3.6"
+version = "3.0.1"
 description = "The comprehensive WSGI web application library."
 optional = false
 python-versions = ">=3.8"
 files = [
-    {file = "Werkzeug-2.3.6-py3-none-any.whl", hash = "sha256:935539fa1413afbb9195b24880778422ed620c0fc09670945185cce4d91a8890"},
-    {file = "Werkzeug-2.3.6.tar.gz", hash = "sha256:98c774df2f91b05550078891dee5f0eb0cb797a522c757a2452b9cee5b202330"},
+    {file = "werkzeug-3.0.1-py3-none-any.whl", hash = "sha256:90a285dc0e42ad56b34e696398b8122ee4c681833fb35b8334a095d82c56da10"},
+    {file = "werkzeug-3.0.1.tar.gz", hash = "sha256:507e811ecea72b18a404947aded4b3390e1db8f826b494d76550ef45bb3b1dcc"},
 ]
 
 [package.dependencies]
@@ -1878,4 +1878,4 @@ testing = ["big-O", "flake8 (<5)", "jaraco.functools", "jaraco.itertools", "more
 [metadata]
 lock-version = "2.0"
 python-versions = "^3.11"
-content-hash = "08d19238641ce7a4a496281136dc9121ce20a1fcc5b44203f746c42ede909494"
+content-hash = "72499685188a2854857ff5305827c43bdcf81e0524740924d935c90cdef2eff2"
diff --git a/pyproject.toml b/pyproject.toml
index 66ca8b75..7bc8b266 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -19,7 +19,7 @@ nowplaying = 'nowplaying.__main__:main'
 
 [tool.poetry.dependencies]
 python = "^3.11"
-Werkzeug = "^2.3.6"
+Werkzeug = ">=2.3.6,<4.0.0"
 configargparse = "^1.5.5"
 CherryPy = "^18.8.0"
 cachelib = "^0.10.1"