diff --git a/appengine/flexible/websockets/requirements.txt b/appengine/flexible/websockets/requirements.txt
index c1525d36077..471e540b8bf 100644
--- a/appengine/flexible/websockets/requirements.txt
+++ b/appengine/flexible/websockets/requirements.txt
@@ -2,5 +2,5 @@ Flask==1.1.4 # it seems like Flask-sockets doesn't play well with 2.0+
 Flask-Sockets==0.2.1
 gunicorn==23.0.0
 requests==2.31.0
-markupsafe==2.0.1
+markupsafe==3.0.3
 Werkzeug==1.0.1;
diff --git a/composer/2022_airflow_summit/requirements-test.txt b/composer/2022_airflow_summit/requirements-test.txt
index a2ac75570c0..e80af6fa760 100644
--- a/composer/2022_airflow_summit/requirements-test.txt
+++ b/composer/2022_airflow_summit/requirements-test.txt
@@ -1,4 +1,4 @@
 pytest==8.2.0
 cloud-composer-dag-test-utils==1.0.0
-markupsafe==2.1.2
+markupsafe==3.0.3
 backoff==2.2.1
\ No newline at end of file
diff --git a/functions/helloworld/requirements.txt b/functions/helloworld/requirements.txt
index 8c9cb7ea6d4..9547678a6e2 100644
--- a/functions/helloworld/requirements.txt
+++ b/functions/helloworld/requirements.txt
@@ -1,4 +1,4 @@
 functions-framework==3.9.2
 flask==3.0.3
 google-cloud-error-reporting==1.11.1
-MarkupSafe==2.1.3
+MarkupSafe==3.0.3