diff --git a/requirements.in b/requirements.in
index b0c8dbc60..a9d29f3a1 100644
--- a/requirements.in
+++ b/requirements.in
@@ -4,4 +4,4 @@ lektor-twitter-embed==0.2.0
 lektor-youtube-embed==0.2.0
 marshmallow==3.15.0
 python-slugify==4.0.1
-Pillow==8.1.1
+Pillow==9.3.0
diff --git a/requirements.txt b/requirements.txt
index 4655f6545..54da3c3b1 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -22,8 +22,6 @@ flask==2.1.1
     # via lektor
 idna==3.3
     # via requests
-importlib-metadata==4.11.3
-    # via flask
 inifile==0.4.1
     # via lektor
 itsdangerous==2.1.2
@@ -52,7 +50,7 @@ mistune==0.8.4
     # via lektor
 packaging==21.3
     # via marshmallow
-pillow==8.1.1
+pillow==9.3.0
     # via -r requirements.in
 pyparsing==3.0.8
     # via packaging
@@ -76,8 +74,6 @@ werkzeug==2.1.1
     # via
     #   flask
     #   lektor
-zipp==3.8.0
-    # via importlib-metadata
 
 # The following packages are considered to be unsafe in a requirements file:
 # pip