diff --git a/requirements.txt b/requirements.txt
index 7c82d69..25bdcef 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -6,7 +6,7 @@ PasteDeploy==1.5.2
 PyYAML==4.2b1
 Pygments==2.7.4
 Sphinx==3.0.4
-WebOb==1.6.0a0
+WebOb==1.8.8
 WebTest==2.0.18
 beautifulsoup4==4.3.2
 boto==2.39.0
@@ -15,7 +15,7 @@ cornice==1.0.0
 couchdb-schematics==1.1.1
 coverage==3.7.1
 docutils==0.12
-gevent==1.2a1
+gevent==24.10.1
 greenlet==0.4.9
 iso8601==0.1.10
 jsonpointer==1.9
@@ -32,7 +32,7 @@ pytz==2014.10
 repoze.lru==0.6
 requests==2.20
 schematics==1.1.1
-setuptools==7.0
+setuptools==70.0.0
 sh==1.11
 simplejson==3.6.5
 six==1.9.0
@@ -40,10 +40,11 @@ sphinxcontrib-httpdomain==1.4.0
 translationstring==1.3
 tzlocal==1.1.2
 venusian==1.0
-waitress==1.0a1
+waitress==3.0.1
 zope.deprecation==4.1.1
 zope.interface==4.1.1
 git+https://github.com/openprocurement/barbecue.git
 git+https://github.com/openprocurement/python-json-patch.git
 git+https://github.com/openprocurement/rfc6266.git
 -e git+https://github.com/openprocurement/openprocurement.api.git@master#egg=openprocurement.api
+certifi>=2024.7.4 # not directly required, pinned by Snyk to avoid a vulnerability