diff --git a/app/pyproject.toml b/app/pyproject.toml
index d6cc6c0d..9569edee 100644
--- a/app/pyproject.toml
+++ b/app/pyproject.toml
@@ -9,7 +9,7 @@ dependencies = [
     "tamga>=1.4.0",
     "flask==3.1.3",
     "flask-sqlalchemy>=3.1.1",
-    "flask-wtf>=1.2.2",
+    "flask-wtf>=1.3.0",
     "passlib>=1.7.4",
     "wtforms>=3.2.1",
     "markdown2==2.5.5",
diff --git a/app/uv.lock b/app/uv.lock
index 7caf69ea..3d36c4be 100644
--- a/app/uv.lock
+++ b/app/uv.lock
@@ -204,16 +204,16 @@ wheels = [
 
 [[package]]
 name = "flask-wtf"
-version = "1.2.2"
+version = "1.3.0"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "flask" },
     { name = "itsdangerous" },
     { name = "wtforms" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/80/9b/f1cd6e41bbf874f3436368f2c7ee3216c1e82d666ff90d1d800e20eb1317/flask_wtf-1.2.2.tar.gz", hash = "sha256:79d2ee1e436cf570bccb7d916533fa18757a2f18c290accffab1b9a0b684666b", size = 42641, upload-time = "2024-10-24T07:18:58.555Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/91/f1/605a56d4ea217b307f3e6f4d663e0351253d85d841edc93ba559f0648e19/flask_wtf-1.3.0.tar.gz", hash = "sha256:61d5dabc50c3df885c297dcbd80810443a5d632106c8a69cab8ce740f0cdd7cc", size = 50414, upload-time = "2026-04-23T07:41:55.096Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/dc/19/354449145fbebb65e7c621235b6ad69bebcfaec2142481f044d0ddc5b5c5/flask_wtf-1.2.2-py3-none-any.whl", hash = "sha256:e93160c5c5b6b571cf99300b6e01b72f9a101027cab1579901f8b10c5daf0b70", size = 12779, upload-time = "2024-10-24T07:18:56.976Z" },
+    { url = "https://files.pythonhosted.org/packages/14/d2/97adf2ec7af95522573e6dd5493ee84792d0fbfb2def010c4a581b8d6e5e/flask_wtf-1.3.0-py3-none-any.whl", hash = "sha256:dc5e3a4ce97f75c47bf6c1c72ad2c3b7bdf579a2ed13aebcc5d3d81fe2571160", size = 13959, upload-time = "2026-04-23T07:41:53.828Z" },
 ]
 
 [[package]]
@@ -254,7 +254,7 @@ requires-dist = [
     { name = "filelock", marker = "extra == 'test'", specifier = ">=3.20.3" },
     { name = "flask", specifier = "==3.1.3" },
     { name = "flask-sqlalchemy", specifier = ">=3.1.1" },
-    { name = "flask-wtf", specifier = ">=1.2.2" },
+    { name = "flask-wtf", specifier = ">=1.3.0" },
     { name = "markdown2", specifier = "==2.5.5" },
     { name = "passlib", specifier = ">=1.7.4" },
     { name = "playwright", marker = "extra == 'test'", specifier = ">=1.57.0" },