diff --git a/requirements.txt b/requirements.txt
index aa99543d..120ac1b5 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -1,4 +1,4 @@
-Django==1.11.29
+Django==4.2.22
 git+https://github.com/dbca-wa/dpaw-utils.git@0.3a16#egg=dpaw-utils
 git+https://github.com/django-oscar/django-oscar.git@8a3288da439cc2a878f44ae5c5101043e658d2a2#egg=django-oscar
 git+https://github.com/xzzy/django_crispy_jcaptcha.git#egg=django_crispy_jcaptcha
@@ -32,3 +32,4 @@ dj-static==0.0.6
 dj-database-url==0.5.0
 django-treebeard==4.3.1
 psycopg2==2.8.6
+requests>=2.32.4 # not directly required, pinned by Snyk to avoid a vulnerability