diff --git a/Pipfile b/Pipfile
index 8bb9b0203c..fcf9fe9212 100644
--- a/Pipfile
+++ b/Pipfile
@@ -78,7 +78,7 @@ toml = "==0.10.2"
 typed-ast = "==1.4.3"
 typing-extensions = "==3.7.4.3"
 waitress = "==2.1.2"
-webob = "==1.8.8"
+webob = "==1.8.9"
 wrapt = "==1.12.1"
 zipp = "==3.19.3"
 
@@ -184,7 +184,7 @@ ujson = "==5.4.0"
 urllib3 = "==1.26.20"
 venusian = "==3.0.0"
 waitress = "==2.1.2"
-webob = "==1.8.8"
+webob = "==1.8.9"
 "zope.deprecation" = "==4.4.0"
 # Lock dependencies
 pyramid-debugtoolbar = "==4.9"
diff --git a/docker/qgisserver/python/3.6/Pipfile b/docker/qgisserver/python/3.6/Pipfile
index 0612b3ebfd..b82d3716b4 100644
--- a/docker/qgisserver/python/3.6/Pipfile
+++ b/docker/qgisserver/python/3.6/Pipfile
@@ -30,7 +30,7 @@ redis = "==4.3.6"
 six = "==1.15.0"
 translationstring = "==1.4"
 venusian = "==3.0.0"
-webob = "==1.8.8"
+webob = "==1.8.9"
 "zope.deprecation" = "==4.4.0"
 "zope.interface" = "==5.2.0"
 setuptools = "==45.2.0"
diff --git a/docker/qgisserver/python/3.6/Pipfile.lock b/docker/qgisserver/python/3.6/Pipfile.lock
index 65e654d4de..797ceb66d8 100644
--- a/docker/qgisserver/python/3.6/Pipfile.lock
+++ b/docker/qgisserver/python/3.6/Pipfile.lock
@@ -1,7 +1,7 @@
 {
     "_meta": {
         "hash": {
-            "sha256": "c0b1c8f10913fd74f956f654e38e81dba93c3b5d9fbbecc8e7f5649cb8df759a"
+            "sha256": "c38d791d2227cf955cb0672e0188158549c0b1fb9efac5d72886cd2bb969baaa"
         },
         "pipfile-spec": 6,
         "requires": {
@@ -206,11 +206,11 @@
         },
         "pyparsing": {
             "hashes": [
-                "sha256:a1bac0ce561155ecc3ed78ca94d3c9378656ad4c94c1270de543f621420f94ad",
-                "sha256:f9db75911801ed778fe61bb643079ff86601aca99fcae6345aa67292038fb742"
+                "sha256:a6a7ee4235a3f944aa1fa2249307708f893fe5717dc603503c6c7969c070fb7c",
+                "sha256:f86ec8d1a83f11977c9a6ea7598e8c27fc5cddfa5b07ea2241edbbde1d7bc032"
             ],
             "markers": "python_full_version >= '3.6.8'",
-            "version": "==3.1.2"
+            "version": "==3.1.4"
         },
         "pyramid": {
             "hashes": [
@@ -374,11 +374,11 @@
         },
         "webob": {
             "hashes": [
-                "sha256:2abc1555e118fc251e705fc6dc66c7f5353bb9fbfab6d20e22f1c02b4b71bcee",
-                "sha256:b60ba63f05c0cf61e086a10c3781a41fcfe30027753a8ae6d819c77592ce83ea"
+                "sha256:45e34c58ed0c7e2ecd238ffd34432487ff13d9ad459ddfd77895e67abba7c1f9",
+                "sha256:ad6078e2edb6766d1334ec3dee072ac6a7f95b1e32ce10def8ff7f0f02d56589"
             ],
             "index": "pypi",
-            "version": "==1.8.8"
+            "version": "==1.8.9"
         },
         "zipp": {
             "hashes": [
diff --git a/docker/qgisserver/python/3.8/Pipfile b/docker/qgisserver/python/3.8/Pipfile
index 78535caa89..a1953a368f 100644
--- a/docker/qgisserver/python/3.8/Pipfile
+++ b/docker/qgisserver/python/3.8/Pipfile
@@ -30,7 +30,7 @@ redis = "==4.3.6"
 six = "==1.15.0"
 translationstring = "==1.4"
 venusian = "==3.0.0"
-webob = "==1.8.8"
+webob = "==1.8.9"
 "zope.deprecation" = "==4.4.0"
 "zope.interface" = "==5.2.0"
 setuptools = "==70.0.0"
diff --git a/docker/qgisserver/python/3.8/Pipfile.lock b/docker/qgisserver/python/3.8/Pipfile.lock
index 09cdb165be..b8c40d34cc 100644
--- a/docker/qgisserver/python/3.8/Pipfile.lock
+++ b/docker/qgisserver/python/3.8/Pipfile.lock
@@ -1,7 +1,7 @@
 {
     "_meta": {
         "hash": {
-            "sha256": "f01387212c4e55f0c61c911caf21078d1c3a89d9046d8449b6465faa29c9db3c"
+            "sha256": "862176d0920b87784857bc977a4d4723b3d08a94fbb152b09d0d7964dbae5c33"
         },
         "pipfile-spec": 6,
         "requires": {
@@ -18,11 +18,11 @@
     "default": {
         "async-timeout": {
             "hashes": [
-                "sha256:4640d96be84d82d02ed59ea2b7105a0f7b33abe8703703cd0ab0bf87c427522f",
-                "sha256:7405140ff1230c310e51dc27b3145b9092d659ce68ff733fb0cefe3ee42be028"
+                "sha256:49675ec889daacfe65ff66d2dde7dd1447a6f4b2f23721022e4ba121f8772a85",
+                "sha256:904719a4bd6e0520047d0ddae220aabee67b877f7ca17bf8cea20f67f6247ae0"
             ],
-            "markers": "python_version >= '3.7'",
-            "version": "==4.0.3"
+            "markers": "python_version >= '3.8'",
+            "version": "==5.0.0"
         },
         "bottle": {
             "hashes": [
@@ -377,12 +377,12 @@
         },
         "webob": {
             "hashes": [
-                "sha256:2abc1555e118fc251e705fc6dc66c7f5353bb9fbfab6d20e22f1c02b4b71bcee",
-                "sha256:b60ba63f05c0cf61e086a10c3781a41fcfe30027753a8ae6d819c77592ce83ea"
+                "sha256:45e34c58ed0c7e2ecd238ffd34432487ff13d9ad459ddfd77895e67abba7c1f9",
+                "sha256:ad6078e2edb6766d1334ec3dee072ac6a7f95b1e32ce10def8ff7f0f02d56589"
             ],
             "index": "pypi",
             "markers": "python_version >= '2.7' and python_version not in '3.0, 3.1, 3.2'",
-            "version": "==1.8.8"
+            "version": "==1.8.9"
         },
         "zope.deprecation": {
             "hashes": [