diff --git a/requirements.in b/requirements.in
index ba1f753b2..15596e3df 100644
--- a/requirements.in
+++ b/requirements.in
@@ -8,7 +8,7 @@ Flask==1.1.2  # pyup: <2
 Flask-WTF==1.0.1
 wtforms==3.0.1
 Flask-Login==0.6.1
-werkzeug==2.1.2
+werkzeug==2.0.3  # Can’t be upgraded until we are using Flask >= 2
 jinja2==3.0.3  # Can’t be upgraded until we are using Flask >= 2
 
 blinker==1.4
diff --git a/requirements.txt b/requirements.txt
index bc632b6f9..028e1af5f 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -213,7 +213,7 @@ urllib3==1.26.5
     #   requests
 webencodings==0.5.1
     # via bleach
-werkzeug==2.1.2
+werkzeug==2.0.3
     # via
     #   -r requirements.in
     #   flask