diff --git a/CHANGELOG.md b/CHANGELOG.md
index 30bc58eed4..ab1f0b6bae 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -37,6 +37,7 @@ This project adheres to [Semantic Versioning](https://semver.org/).
 ## Changed
 
 - [#2593](https://github.com/plotly/dash/pull/2593) dcc.Input accepts a number for its debounce argument
+- [#2614](https://github.com/plotly/dash/pull/2614) Bump Flask & Werkzeug in requires-install.txt, closes [#2592](https://github.com/plotly/dash/issues/2592)
 
 ## Updated
 
diff --git a/requires-install.txt b/requires-install.txt
index 0606e4cfd9..1c557765b1 100644
--- a/requires-install.txt
+++ b/requires-install.txt
@@ -1,5 +1,5 @@
-Flask>=1.0.4,<2.3.0
-Werkzeug<2.3.0
+Flask>=1.0.4,<2.4.0
+Werkzeug<2.4.0
 plotly>=5.0.0
 dash_html_components==2.0.0
 dash_core_components==2.0.0