diff --git a/2017/quals/2017-misc-mindreader/app/requirements.txt b/2017/quals/2017-misc-mindreader/app/requirements.txt
index 9d793daf1..32eb82b67 100644
--- a/2017/quals/2017-misc-mindreader/app/requirements.txt
+++ b/2017/quals/2017-misc-mindreader/app/requirements.txt
@@ -1,3 +1,3 @@
-gunicorn==19.7.1
-Flask==2.2.5
+gunicorn==22.0.0
+Flask==3.1.0
 gevent
diff --git a/2018/finals/web-mitigator/app/requirements.txt b/2018/finals/web-mitigator/app/requirements.txt
index 8205d9b12..4f9b696a8 100644
--- a/2018/finals/web-mitigator/app/requirements.txt
+++ b/2018/finals/web-mitigator/app/requirements.txt
@@ -12,5 +12,5 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-Flask==1.0.2
+Flask==2.2.5
 google-cloud-tasks==0.3.0
diff --git a/2019/finals/misc-stuffed-finals/app/requirements.txt b/2019/finals/misc-stuffed-finals/app/requirements.txt
index 3b1839378..737eb106f 100644
--- a/2019/finals/misc-stuffed-finals/app/requirements.txt
+++ b/2019/finals/misc-stuffed-finals/app/requirements.txt
@@ -12,5 +12,5 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-Flask==1.0.2
-gunicorn==19.9.0
+Flask==2.2.5
+gunicorn==22.0.0
diff --git a/2019/finals/web-gphotos-finals/app/Pipfile b/2019/finals/web-gphotos-finals/app/Pipfile
index cd9434916..05c359165 100644
--- a/2019/finals/web-gphotos-finals/app/Pipfile
+++ b/2019/finals/web-gphotos-finals/app/Pipfile
@@ -4,8 +4,8 @@ verify_ssl = true
 name = "pypi"
 
 [packages]
-django = "==2.2.5"
+django = "==4.2.17"
 wand = "==0.5.7"
-gunicorn = "==19.9.0"
+gunicorn = "==22.0.0"
 
 [dev-packages]
diff --git a/2019/finals/web-gphotos-finals/app/requirements.txt b/2019/finals/web-gphotos-finals/app/requirements.txt
index afab0c6af..65d83934d 100644
--- a/2019/finals/web-gphotos-finals/app/requirements.txt
+++ b/2019/finals/web-gphotos-finals/app/requirements.txt
@@ -2,5 +2,5 @@
 django==2.2.5
 gunicorn==19.9.0
 pytz==2019.2
-sqlparse==0.3.0; python_version != '3.2.*'
+sqlparse==0.5.0; python_version != '3.2.*'
 wand==0.5.7
diff --git a/2020/quals/web-littlethings-fixed/exploit/requirements.txt b/2020/quals/web-littlethings-fixed/exploit/requirements.txt
index 0a836fa4a..d2b057001 100644
--- a/2020/quals/web-littlethings-fixed/exploit/requirements.txt
+++ b/2020/quals/web-littlethings-fixed/exploit/requirements.txt
@@ -1,2 +1,2 @@
-requests==2.24.0
-Flask==1.1.2
+requests==2.32.2
+Flask==2.2.5
diff --git a/2020/quals/web-littlethings/exploit/requirements.txt b/2020/quals/web-littlethings/exploit/requirements.txt
index 0a836fa4a..d2b057001 100644
--- a/2020/quals/web-littlethings/exploit/requirements.txt
+++ b/2020/quals/web-littlethings/exploit/requirements.txt
@@ -1,2 +1,2 @@
-requests==2.24.0
-Flask==1.1.2
+requests==2.32.2
+Flask==2.2.5
diff --git a/2022/hackceler8/game/requirements.txt b/2022/hackceler8/game/requirements.txt
index fde807ca3..49d995116 100644
--- a/2022/hackceler8/game/requirements.txt
+++ b/2022/hackceler8/game/requirements.txt
@@ -2,8 +2,8 @@ arcade==2.6.14
 attrs==21.4.0
 cffi==1.15.0
 numpy==1.22.4
-Pillow==9.1.1
-protobuf==3.20.1
+Pillow==10.3.0
+protobuf==3.20.2
 pycparser==2.21
 pyglet==2.0.dev16
 pymunk==6.2.1
diff --git a/2022/quals/web-log4j/server/requirements.txt b/2022/quals/web-log4j/server/requirements.txt
index 41ec06db2..ecac66a75 100644
--- a/2022/quals/web-log4j/server/requirements.txt
+++ b/2022/quals/web-log4j/server/requirements.txt
@@ -1,2 +1,2 @@
-flask==2.1.2
-gunicorn==20.1.0
+flask==2.2.5
+gunicorn==22.0.0
diff --git a/2023/quals/web-under-construction/challenge/flask/requirements.txt b/2023/quals/web-under-construction/challenge/flask/requirements.txt
index 4f778ad57..6fea35933 100644
--- a/2023/quals/web-under-construction/challenge/flask/requirements.txt
+++ b/2023/quals/web-under-construction/challenge/flask/requirements.txt
@@ -1,16 +1,16 @@
 click==8.1.3
-Flask==2.2.3
+Flask==2.2.5
 Flask-Login==0.6.2
 Flask-SQLAlchemy==3.0.3
 greenlet==2.0.2
 itsdangerous==2.1.2
-Jinja2==3.1.2
+Jinja2==3.1.5
 MarkupSafe==2.1.2
 SQLAlchemy==2.0.10
 typing_extensions==4.5.0
-Werkzeug==2.2.3
-requests==2.29.0
-gunicorn==20.1.0
-pymysql==1.0.3
-gevent==22.10.2
-cryptography==41.0.4
+Werkzeug==3.0.6
+requests==2.32.2
+gunicorn==22.0.0
+pymysql==1.1.1
+gevent==23.9.0
+cryptography==44.0.0