diff --git a/requirements/wagtail.txt b/requirements/wagtail.txt
index 9aa191724d9..482a0ed7e08 100644
--- a/requirements/wagtail.txt
+++ b/requirements/wagtail.txt
@@ -1 +1,2 @@
-wagtail==2.10.1
+wagtail==6.3.6
+django>=4.2.28 # not directly required, pinned by Snyk to avoid a vulnerability