diff --git a/requirements-apps-api.txt b/requirements-apps-api.txt
index 43a36f107..469dde376 100644
--- a/requirements-apps-api.txt
+++ b/requirements-apps-api.txt
@@ -1,4 +1,5 @@
-Flask==3.0.3
+# TODO: verify that dependabot bumps to Flask 3.0.3 on Monday
+Flask==3.0.2
 Flask-Cors==5.0.0
 jsonschema==4.23.0
 openapi-core==0.19.4