diff --git a/api/poetry.lock b/api/poetry.lock
index fac8f8ec4..b94f6e8f9 100644
--- a/api/poetry.lock
+++ b/api/poetry.lock
@@ -115,7 +115,7 @@ python-versions = ">=3.7"
 typing-extensions = {version = "*", markers = "python_version < \"3.8\""}
 
 [package.extras]
-tests = ["mypy (>=0.800)", "pytest-asyncio", "pytest"]
+tests = ["pytest", "pytest-asyncio", "mypy (>=0.800)"]
 
 [[package]]
 name = "async-timeout"
@@ -239,17 +239,20 @@ uvloop = ["uvloop (>=0.15.2)"]
 
 [[package]]
 name = "bleach"
-version = "4.1.0"
+version = "5.0.1"
 description = "An easy safelist-based HTML-sanitizing tool."
 category = "main"
 optional = false
-python-versions = ">=3.6"
+python-versions = ">=3.7"
 
 [package.dependencies]
-packaging = "*"
 six = ">=1.9.0"
 webencodings = "*"
 
+[package.extras]
+css = ["tinycss2 (>=1.1.0,<1.2)"]
+dev = ["build (==0.8.0)", "flake8 (==4.0.1)", "hashin (==0.17.0)", "pip-tools (==6.6.2)", "pytest (==7.1.2)", "Sphinx (==4.3.2)", "tox (==3.25.0)", "twine (==4.0.1)", "wheel (==0.37.1)", "black (==22.3.0)", "mypy (==0.961)"]
+
 [[package]]
 name = "boto3"
 version = "1.24.35"
@@ -2122,7 +2125,7 @@ testing = ["coverage (>=5.0.3)", "zope.event", "zope.testing"]
 [metadata]
 lock-version = "1.1"
 python-versions = "^3.7"
-content-hash = "5e2775c741ccb538fd4c9c8e83f64eba5c0cad488493a191b233dd95d93c8e8b"
+content-hash = "a01cef077cd58da4a0ada4c4025ae6cd1e571bbae14f71087c6c8422d1f12c44"
 
 [metadata.files]
 aiohttp = [
@@ -2287,8 +2290,8 @@ black = [
     {file = "black-22.6.0.tar.gz", hash = "sha256:6c6d39e28aed379aec40da1c65434c77d75e65bb59a1e1c283de545fb4e7c6c9"},
 ]
 bleach = [
-    {file = "bleach-4.1.0-py2.py3-none-any.whl", hash = "sha256:4d2651ab93271d1129ac9cbc679f524565cc8a1b791909c4a51eac4446a15994"},
-    {file = "bleach-4.1.0.tar.gz", hash = "sha256:0900d8b37eba61a802ee40ac0061f8c2b5dee29c1927dd1d233e075ebf5a71da"},
+    {file = "bleach-5.0.1-py3-none-any.whl", hash = "sha256:085f7f33c15bd408dd9b17a4ad77c577db66d76203e5984b1bd59baeee948b2a"},
+    {file = "bleach-5.0.1.tar.gz", hash = "sha256:0d03255c47eb9bd2f26aa9bb7f2107732e7e8fe195ca2f64709fcf3b0a4a085c"},
 ]
 boto3 = [
     {file = "boto3-1.24.35-py3-none-any.whl", hash = "sha256:1822c1524c5be007b966498cd196a040a1bd414c8aca7b270431a10d3ade8294"},
diff --git a/api/pyproject.toml b/api/pyproject.toml
index 367533205..ffe2ad257 100644
--- a/api/pyproject.toml
+++ b/api/pyproject.toml
@@ -47,7 +47,7 @@ django-cacheops = "==6.1"
 service-identity = "==21.1.0"
 click = "==8.1.3"
 Markdown = "==3.4.1"
-bleach = "==4.1.0"
+bleach = "==5.0.1"
 feedparser = "==6.0.10"
 watchdog = "==2.1.9"
 asgiref = "==3.5.2" #1516