diff --git a/poetry.lock b/poetry.lock
index f468a2c2..0952583a 100644
--- a/poetry.lock
+++ b/poetry.lock
@@ -406,13 +406,13 @@ bcrypt = ["bcrypt"]
 
 [[package]]
 name = "django-cors-headers"
-version = "4.1.0"
+version = "4.3.0"
 description = "django-cors-headers is a Django application for handling the server headers required for Cross-Origin Resource Sharing (CORS)."
 optional = false
-python-versions = ">=3.7"
+python-versions = ">=3.8"
 files = [
-    {file = "django_cors_headers-4.1.0-py3-none-any.whl", hash = "sha256:88a4bfae24b6404dd0e0640203cb27704a2a57fd546a429e5d821dfa53dd1acf"},
-    {file = "django_cors_headers-4.1.0.tar.gz", hash = "sha256:36a8d7a6dee6a85f872fe5916cc878a36d0812043866355438dfeda0b20b6b78"},
+    {file = "django_cors_headers-4.3.0-py3-none-any.whl", hash = "sha256:bd36c7aea0d070e462f3383f0dc9ef717e5fdc2b10a99c98c285f16da84ffba2"},
+    {file = "django_cors_headers-4.3.0.tar.gz", hash = "sha256:25aabc94d4837678c1edf442c7f68a5f5fd151f6767b0e0b01c61a2179d02711"},
 ]
 
 [package.dependencies]
@@ -1979,4 +1979,4 @@ testing = ["big-O", "flake8 (<5)", "jaraco.functools", "jaraco.itertools", "more
 [metadata]
 lock-version = "2.0"
 python-versions = "^3.9"
-content-hash = "60112e5d692d84ff7119441422ec49fc056bf6a577ae20797fce420712fa2656"
+content-hash = "570845f052de8c4941391bd4471dd9f0f36a9a42acefaf6a7a6f260b527f422d"
diff --git a/pyproject.toml b/pyproject.toml
index 08dddc9c..b4abaff1 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -23,7 +23,7 @@ python = "^3.9"
 python-dateutil = "^2.8.2"
 django = "^3.2.19"
 # might remove this once we find out how the jsonapi extras_require work
-django-cors-headers = "^4.1.0"
+django-cors-headers = "^4.3.0"
 django-filter = "^23.2"
 django-multiselectfield = "^0.1.12"
 django-prometheus = "^2.3.1"