diff --git a/packages/calitp-data-analysis/poetry.lock b/packages/calitp-data-analysis/poetry.lock
index f2538dfd56..92fcfcaf54 100644
--- a/packages/calitp-data-analysis/poetry.lock
+++ b/packages/calitp-data-analysis/poetry.lock
@@ -1645,13 +1645,13 @@ testing = ["Django (<3.1)", "attrs", "colorama", "docopt", "pytest (<7.0.0)"]
 
 [[package]]
 name = "jinja2"
-version = "3.0.3"
+version = "3.1.3"
 description = "A very fast and expressive template engine."
 optional = false
-python-versions = ">=3.6"
+python-versions = ">=3.7"
 files = [
-    {file = "Jinja2-3.0.3-py3-none-any.whl", hash = "sha256:077ce6014f7b40d03b47d1f1ca4b0fc8328a692bd284016f806ed0eaca390ad8"},
-    {file = "Jinja2-3.0.3.tar.gz", hash = "sha256:611bb273cd68f3b993fabdc4064fc858c5b47a973cb5aa7999ec1ba405c87cd7"},
+    {file = "Jinja2-3.1.3-py3-none-any.whl", hash = "sha256:7d6d50dd97d52cbc355597bd845fabfbac3f551e1f99619e39a35ce8c370b5fa"},
+    {file = "Jinja2-3.1.3.tar.gz", hash = "sha256:ac8bd6544d4bb2c9792bf3a159e80bba8fda7f07e81bc3aed565432d5925ba90"},
 ]
 
 [package.dependencies]
@@ -3802,4 +3802,4 @@ testing = ["big-O", "jaraco.functools", "jaraco.itertools", "more-itertools", "p
 [metadata]
 lock-version = "2.0"
 python-versions = "~3.9"
-content-hash = "0ccd0589fad16adcae81a89cf767664b980f26b702b7e23bc41d4417ab8fcd90"
+content-hash = "f4bdccd01943b80ee4e036e155d624399d8904d46d77426de26ddbe1a8f39001"
diff --git a/packages/calitp-data-analysis/pyproject.toml b/packages/calitp-data-analysis/pyproject.toml
index 5695ebdcd4..5e0b121f3a 100644
--- a/packages/calitp-data-analysis/pyproject.toml
+++ b/packages/calitp-data-analysis/pyproject.toml
@@ -8,7 +8,7 @@ authors = ["Andrew Vaccaro <andrew.v@jarv.us>"]
 python = "~3.9"
 ipython = "^8.9.0"
 siuba = "^0.4.2"
-jinja2 = "<3.1.0"
+jinja2 = "<3.2.0"
 sqlalchemy-bigquery = "^1.6.1"
 pandas-gbq = "^0.19.1"
 pandas = "<2" # keep us below pandas 2.0 since pandas-gbq does not specify, and siuba errors currently