diff --git a/requirements.txt b/requirements.txt
index 155e5c6766..ca8bc3a5b1 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -9,7 +9,7 @@ celery>=5.2.6
 coverage>=4.5.4,<5.0    # Coverage 5.x moves from a json database to SQLite.  Moving to 5.x will require substantial rewrites in ietf.utils.test_runner and ietf.release.views
 decorator>=5.1.1
 defusedxml>=0.7.1    # for TastyPie when using xml; not a declared dependency
-Django>=2.2.28,<3.0
+Django>=4.2.27
 django-analytical>=3.1.0
 django-bootstrap5>=21.3
 django-celery-beat>=2.3.0
@@ -66,3 +66,4 @@ Unidecode>=1.3.4
 weasyprint>=52.5,<53    # Datatracker tests past on 54, but xml2rfc tests do not.
 xml2rfc>=3.12.4
 xym>=0.6,<1.0
+sqlparse>=0.5.4 # not directly required, pinned by Snyk to avoid a vulnerability