diff --git a/src/bk-login/poetry.lock b/src/bk-login/poetry.lock
index 54394cb87..a4b446670 100644
--- a/src/bk-login/poetry.lock
+++ b/src/bk-login/poetry.lock
@@ -2412,13 +2412,13 @@ reference = "tencent"
 
 [[package]]
 name = "werkzeug"
-version = "3.0.3"
+version = "3.0.6"
 description = "The comprehensive WSGI web application library."
 optional = false
 python-versions = ">=3.8"
 files = [
-    {file = "werkzeug-3.0.3-py3-none-any.whl", hash = "sha256:fc9645dc43e03e4d630d23143a04a7f947a9a3b5727cd535fdfe155a17cc48c8"},
-    {file = "werkzeug-3.0.3.tar.gz", hash = "sha256:097e5bfda9f0aba8da6b8545146def481d06aa7d3266e7448e2cccf67dd8bd18"},
+    {file = "werkzeug-3.0.6-py3-none-any.whl", hash = "sha256:1bc0c2310d2fbb07b1dd1105eba2f7af72f322e1e455f2f93c993bee8c8a5f17"},
+    {file = "werkzeug-3.0.6.tar.gz", hash = "sha256:a8dd59d4de28ca70471a34cba79bed5f7ef2e036a76b3ab0835474246eb41f8d"},
 ]
 
 [package.dependencies]
@@ -2434,17 +2434,17 @@ reference = "tencent"
 
 [[package]]
 name = "whitenoise"
-version = "6.5.0"
+version = "6.8.2"
 description = "Radically simplified static file serving for WSGI applications"
 optional = false
-python-versions = ">=3.7"
+python-versions = ">=3.9"
 files = [
-    {file = "whitenoise-6.5.0-py3-none-any.whl", hash = "sha256:16468e9ad2189f09f4a8c635a9031cc9bb2cdbc8e5e53365407acf99f7ade9ec"},
-    {file = "whitenoise-6.5.0.tar.gz", hash = "sha256:15fe60546ac975b58e357ccaeb165a4ca2d0ab697e48450b8f0307ca368195a8"},
+    {file = "whitenoise-6.8.2-py3-none-any.whl", hash = "sha256:df12dce147a043d1956d81d288c6f0044147c6d2ab9726e5772ac50fb45d2280"},
+    {file = "whitenoise-6.8.2.tar.gz", hash = "sha256:486bd7267a375fa9650b136daaec156ac572971acc8bf99add90817a530dd1d4"},
 ]
 
 [package.extras]
-brotli = ["Brotli"]
+brotli = ["brotli"]
 
 [package.source]
 type = "legacy"
@@ -2644,4 +2644,4 @@ reference = "tencent"
 [metadata]
 lock-version = "2.0"
 python-versions = ">=3.11,<3.12"
-content-hash = "3e19eb308a8c9bcd410333795fcbe035cb7896e0e5a1ce56efb4e93ac6f1b081"
+content-hash = "d160987d36b6c54990b304d54694aa0f87bf45bab63d3a8cc247069154ef152c"
diff --git a/src/bk-login/pyproject.toml b/src/bk-login/pyproject.toml
index 1a8e90462..98d867f13 100644
--- a/src/bk-login/pyproject.toml
+++ b/src/bk-login/pyproject.toml
@@ -18,8 +18,8 @@ requests = "2.32.3"
 gunicorn = "23.0.0"
 gevent = "24.10.3"
 django-environ = "0.8.1"
-whitenoise = "6.5.0"
-werkzeug = "3.0.3"
+whitenoise = "6.8.2"
+werkzeug = "3.0.6"
 python-json-logger = "2.0.7"
 concurrent-log-handler = "0.9.25"
 django-prometheus = "2.3.1"
diff --git a/src/bk-login/requirements.txt b/src/bk-login/requirements.txt
index 3efeda1cf..104c22e81 100644
--- a/src/bk-login/requirements.txt
+++ b/src/bk-login/requirements.txt
@@ -69,8 +69,8 @@ typing-extensions==4.12.2 ; python_version >= "3.11" and python_version < "3.12"
 tzdata==2024.2 ; python_version >= "3.11" and python_version < "3.12" and sys_platform == "win32"
 urllib3==1.26.20 ; python_version >= "3.11" and python_version < "3.12"
 watchdog==6.0.0 ; python_version >= "3.11" and python_version < "3.12"
-werkzeug==3.0.3 ; python_version >= "3.11" and python_version < "3.12"
-whitenoise==6.5.0 ; python_version >= "3.11" and python_version < "3.12"
+werkzeug==3.0.6 ; python_version >= "3.11" and python_version < "3.12"
+whitenoise==6.8.2 ; python_version >= "3.11" and python_version < "3.12"
 wrapt==1.16.0 ; python_version >= "3.11" and python_version < "3.12"
 zipp==3.21.0 ; python_version >= "3.11" and python_version < "3.12"
 zope-event==5.0 ; python_version >= "3.11" and python_version < "3.12"
diff --git a/src/bk-login/requirements_dev.txt b/src/bk-login/requirements_dev.txt
index d2e81d13b..63e8b2572 100644
--- a/src/bk-login/requirements_dev.txt
+++ b/src/bk-login/requirements_dev.txt
@@ -81,8 +81,8 @@ typing-extensions==4.12.2 ; python_version >= "3.11" and python_version < "3.12"
 tzdata==2024.2 ; python_version >= "3.11" and python_version < "3.12" and sys_platform == "win32"
 urllib3==1.26.20 ; python_version >= "3.11" and python_version < "3.12"
 watchdog==6.0.0 ; python_version >= "3.11" and python_version < "3.12"
-werkzeug==3.0.3 ; python_version >= "3.11" and python_version < "3.12"
-whitenoise==6.5.0 ; python_version >= "3.11" and python_version < "3.12"
+werkzeug==3.0.6 ; python_version >= "3.11" and python_version < "3.12"
+whitenoise==6.8.2 ; python_version >= "3.11" and python_version < "3.12"
 wrapt==1.16.0 ; python_version >= "3.11" and python_version < "3.12"
 zipp==3.21.0 ; python_version >= "3.11" and python_version < "3.12"
 zope-event==5.0 ; python_version >= "3.11" and python_version < "3.12"
diff --git a/src/bk-user/poetry.lock b/src/bk-user/poetry.lock
index a6dfdc6d0..a4868654b 100644
--- a/src/bk-user/poetry.lock
+++ b/src/bk-user/poetry.lock
@@ -3261,13 +3261,13 @@ reference = "tencent"
 
 [[package]]
 name = "werkzeug"
-version = "3.0.3"
+version = "3.0.6"
 description = "The comprehensive WSGI web application library."
 optional = false
 python-versions = ">=3.8"
 files = [
-    {file = "werkzeug-3.0.3-py3-none-any.whl", hash = "sha256:fc9645dc43e03e4d630d23143a04a7f947a9a3b5727cd535fdfe155a17cc48c8"},
-    {file = "werkzeug-3.0.3.tar.gz", hash = "sha256:097e5bfda9f0aba8da6b8545146def481d06aa7d3266e7448e2cccf67dd8bd18"},
+    {file = "werkzeug-3.0.6-py3-none-any.whl", hash = "sha256:1bc0c2310d2fbb07b1dd1105eba2f7af72f322e1e455f2f93c993bee8c8a5f17"},
+    {file = "werkzeug-3.0.6.tar.gz", hash = "sha256:a8dd59d4de28ca70471a34cba79bed5f7ef2e036a76b3ab0835474246eb41f8d"},
 ]
 
 [package.dependencies]
@@ -3283,17 +3283,17 @@ reference = "tencent"
 
 [[package]]
 name = "whitenoise"
-version = "6.5.0"
+version = "6.8.2"
 description = "Radically simplified static file serving for WSGI applications"
 optional = false
-python-versions = ">=3.7"
+python-versions = ">=3.9"
 files = [
-    {file = "whitenoise-6.5.0-py3-none-any.whl", hash = "sha256:16468e9ad2189f09f4a8c635a9031cc9bb2cdbc8e5e53365407acf99f7ade9ec"},
-    {file = "whitenoise-6.5.0.tar.gz", hash = "sha256:15fe60546ac975b58e357ccaeb165a4ca2d0ab697e48450b8f0307ca368195a8"},
+    {file = "whitenoise-6.8.2-py3-none-any.whl", hash = "sha256:df12dce147a043d1956d81d288c6f0044147c6d2ab9726e5772ac50fb45d2280"},
+    {file = "whitenoise-6.8.2.tar.gz", hash = "sha256:486bd7267a375fa9650b136daaec156ac572971acc8bf99add90817a530dd1d4"},
 ]
 
 [package.extras]
-brotli = ["Brotli"]
+brotli = ["brotli"]
 
 [package.source]
 type = "legacy"
@@ -3508,4 +3508,4 @@ reference = "tencent"
 [metadata]
 lock-version = "2.0"
 python-versions = ">=3.11,<3.12"
-content-hash = "d46729951898261fdba51eb264c9497e26ba25aead9f24c1d1db5f9f2c7a5e49"
+content-hash = "5c770215e8cacfe2280dd7c74c5005a1c4557cd5164cf3851a21d99d3c4b4ecc"
diff --git a/src/bk-user/pyproject.toml b/src/bk-user/pyproject.toml
index f8276f2e4..afdf1e441 100644
--- a/src/bk-user/pyproject.toml
+++ b/src/bk-user/pyproject.toml
@@ -24,8 +24,8 @@ gevent = "24.10.3"
 django-environ = "0.8.1"
 django-cors-headers = "4.2.0"
 django-prometheus = "2.3.1"
-whitenoise = "6.5.0"
-werkzeug = "3.0.3"
+whitenoise = "6.8.2"
+werkzeug = "3.0.6"
 python-json-logger = "2.0.7"
 concurrent-log-handler = "0.9.25"
 drf-yasg = "^1.21.7"
diff --git a/src/bk-user/requirements.txt b/src/bk-user/requirements.txt
index fa03a13a2..da9443db6 100644
--- a/src/bk-user/requirements.txt
+++ b/src/bk-user/requirements.txt
@@ -103,8 +103,8 @@ urllib3==1.26.20 ; python_version >= "3.11" and python_version < "3.12"
 vine==5.1.0 ; python_version >= "3.11" and python_version < "3.12"
 watchdog==6.0.0 ; python_version >= "3.11" and python_version < "3.12"
 wcwidth==0.2.13 ; python_version >= "3.11" and python_version < "3.12"
-werkzeug==3.0.3 ; python_version >= "3.11" and python_version < "3.12"
-whitenoise==6.5.0 ; python_version >= "3.11" and python_version < "3.12"
+werkzeug==3.0.6 ; python_version >= "3.11" and python_version < "3.12"
+whitenoise==6.8.2 ; python_version >= "3.11" and python_version < "3.12"
 wrapt==1.16.0 ; python_version >= "3.11" and python_version < "3.12"
 zipp==3.21.0 ; python_version >= "3.11" and python_version < "3.12"
 zope-event==5.0 ; python_version >= "3.11" and python_version < "3.12"
diff --git a/src/bk-user/requirements_dev.txt b/src/bk-user/requirements_dev.txt
index d638cee54..e44529017 100644
--- a/src/bk-user/requirements_dev.txt
+++ b/src/bk-user/requirements_dev.txt
@@ -120,8 +120,8 @@ urllib3==1.26.20 ; python_version >= "3.11" and python_version < "3.12"
 vine==5.1.0 ; python_version >= "3.11" and python_version < "3.12"
 watchdog==6.0.0 ; python_version >= "3.11" and python_version < "3.12"
 wcwidth==0.2.13 ; python_version >= "3.11" and python_version < "3.12"
-werkzeug==3.0.3 ; python_version >= "3.11" and python_version < "3.12"
-whitenoise==6.5.0 ; python_version >= "3.11" and python_version < "3.12"
+werkzeug==3.0.6 ; python_version >= "3.11" and python_version < "3.12"
+whitenoise==6.8.2 ; python_version >= "3.11" and python_version < "3.12"
 wrapt==1.16.0 ; python_version >= "3.11" and python_version < "3.12"
 zipp==3.21.0 ; python_version >= "3.11" and python_version < "3.12"
 zope-event==5.0 ; python_version >= "3.11" and python_version < "3.12"