diff --git a/fixed-requirements.txt b/fixed-requirements.txt
index 038a925614..f9387e51da 100644
--- a/fixed-requirements.txt
+++ b/fixed-requirements.txt
@@ -24,8 +24,9 @@ jsonschema==3.2.0
 kombu==5.3.5
 lockfile==0.12.2
 # Fix MarkupSafe to < 2.1.0 as 2.1.0 removes soft_unicode
-# >=0.23 was from jinja2
-MarkupSafe<2.1.0,>=0.23
+# 202403: Bumped Jinja2 and MarkupSafe to add py3.10 support
+Jinja2==3.1.3
+MarkupSafe==2.1.5
 # mongoengine 0.24.0 has breaking changes to support pymongo 4.0
 mongoengine>=0.21.0,<0.24.0
 # required by orquesta (networkx<2.6 for py3.6, networkx<3 for py3.8)
@@ -34,7 +35,7 @@ networkx<3
 # but the wheel on pypi does not say it supports python3.8, so pip gets
 # confused. For now, pin decorator to work around pip's confusion.
 decorator==4.4.2
-# Use latest (Mar 2024) oslo config for py3.10 support.
+# 202403: Bump oslo.config for py3.10 support.
 oslo.config==9.4.0
 oslo.utils==7.1.0
 # paramiko 2.11.0 is needed by cryptography > 37.0.0
diff --git a/requirements.txt b/requirements.txt
index 552df25e6b..5eb26d8ebc 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -5,7 +5,7 @@
 # If you want to update depdencies for a single component, modify the
 # in-requirements.txt for that component and then run 'make requirements' to
 # update the component requirements.txt
-MarkupSafe<2.1.0,>=0.23
+MarkupSafe==2.1.5
 RandomWords
 amqp<6.0.0,>=5.1.1
 apscheduler==3.7.0
diff --git a/st2actions/requirements.txt b/st2actions/requirements.txt
index 16bd06855f..4495c5f4b7 100644
--- a/st2actions/requirements.txt
+++ b/st2actions/requirements.txt
@@ -5,7 +5,7 @@
 # If you want to update depdencies for a single component, modify the
 # in-requirements.txt for that component and then run 'make requirements' to
 # update the component requirements.txt
-MarkupSafe<2.1.0,>=0.23
+MarkupSafe==2.1.5
 apscheduler==3.7.0
 chardet<3.1.0
 eventlet==0.35.2
diff --git a/st2common/requirements.txt b/st2common/requirements.txt
index d866ad19e5..ad1e7b1f09 100644
--- a/st2common/requirements.txt
+++ b/st2common/requirements.txt
@@ -5,7 +5,7 @@
 # If you want to update depdencies for a single component, modify the
 # in-requirements.txt for that component and then run 'make requirements' to
 # update the component requirements.txt
-MarkupSafe<2.1.0,>=0.23
+MarkupSafe==2.1.5
 amqp<6.0.0,>=5.1.1
 apscheduler==3.7.0
 cffi<1.15.0