diff --git a/api/poetry.lock b/api/poetry.lock
index df2939ea1..eb77281f6 100644
--- a/api/poetry.lock
+++ b/api/poetry.lock
@@ -93,7 +93,7 @@ python-versions = "*"
 
 [[package]]
 name = "arrow"
-version = "1.2.2"
+version = "1.2.3"
 description = "Better dates & times for Python"
 category = "main"
 optional = false
@@ -2191,7 +2191,7 @@ testing = ["coverage (>=5.0.3)", "zope.event", "zope.testing"]
 [metadata]
 lock-version = "1.1"
 python-versions = "^3.7"
-content-hash = "f575c5cfd5634e1325ec0f670b7410e3e138df0864c70a9b039712876908fd6e"
+content-hash = "628bc16f50be854cff0b9b285ef7e4ed62d32f11e570f6ce1bf3b207e3c51624"
 
 [metadata.files]
 aiohttp = [
@@ -2293,8 +2293,8 @@ appnope = [
     {file = "appnope-0.1.3.tar.gz", hash = "sha256:02bd91c4de869fbb1e1c50aafc4098827a7a54ab2f39d9dcba6c9547ed920e24"},
 ]
 arrow = [
-    {file = "arrow-1.2.2-py3-none-any.whl", hash = "sha256:d622c46ca681b5b3e3574fcb60a04e5cc81b9625112d5fb2b44220c36c892177"},
-    {file = "arrow-1.2.2.tar.gz", hash = "sha256:05caf1fd3d9a11a1135b2b6f09887421153b94558e5ef4d090b567b47173ac2b"},
+    {file = "arrow-1.2.3-py3-none-any.whl", hash = "sha256:5a49ab92e3b7b71d96cd6bfcc4df14efefc9dfa96ea19045815914a6ab6b1fe2"},
+    {file = "arrow-1.2.3.tar.gz", hash = "sha256:3934b30ca1b9f292376d9db15b19446088d12ec58629bc3f0da28fd55fb633a1"},
 ]
 asgiref = [
     {file = "asgiref-3.5.2-py3-none-any.whl", hash = "sha256:1d2880b792ae8757289136f1db2b7b99100ce959b2aa57fd69dab783d05afac4"},
diff --git a/api/pyproject.toml b/api/pyproject.toml
index 4cadb1550..90e474b83 100644
--- a/api/pyproject.toml
+++ b/api/pyproject.toml
@@ -21,7 +21,7 @@ celery = "==5.2.7"
 django-cors-headers = "==3.13.0"
 musicbrainzngs = "==0.7.1"
 djangorestframework = "==3.13.1"
-arrow = "==1.2.2"
+arrow = "==1.2.3"
 persisting-theory = "==1.0"
 django-versatileimagefield = "==2.2"
 django-filter = "==22.1"