diff --git a/packages/data/requirements.txt b/packages/data/requirements.txt
index 07977a0ec544..c60f014771d4 100644
--- a/packages/data/requirements.txt
+++ b/packages/data/requirements.txt
@@ -12,7 +12,7 @@ pycryptodome
 pydantic
 pysam
 social-auth-core[openidconnect]==3.3.0
-SQLAlchemy
+SQLAlchemy>=1.3.0,<1.4.0  # https://github.com/kvesteri/sqlalchemy-utils/issues/474
 sqlalchemy-migrate
 sqlalchemy-utils
 WebOb
diff --git a/packages/web_framework/requirements.txt b/packages/web_framework/requirements.txt
index 7f1ec9f035f9..6cffd6a4b861 100644
--- a/packages/web_framework/requirements.txt
+++ b/packages/web_framework/requirements.txt
@@ -8,5 +8,5 @@ pydantic<1.8
 requests
 Routes
 six
-SQLAlchemy
+SQLAlchemy>=1.3.0,<1.4.0  # https://github.com/kvesteri/sqlalchemy-utils/issues/474
 WebOb
diff --git a/packages/web_stack/requirements.txt b/packages/web_stack/requirements.txt
index 326493b152d3..a154f5393631 100644
--- a/packages/web_stack/requirements.txt
+++ b/packages/web_stack/requirements.txt
@@ -1,2 +1,2 @@
-sqlalchemy
+SQLAlchemy>=1.3.0,<1.4.0  # https://github.com/kvesteri/sqlalchemy-utils/issues/474
 galaxy-util
diff --git a/pyproject.toml b/pyproject.toml
index 857b092303c7..f0356fe3267a 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -66,7 +66,7 @@ requests = "*"
 Routes = "*"
 social-auth-core = {version = "==3.3.0", extras = ["openidconnect"]}
 sortedcontainers = "*"
-SQLAlchemy = "~1.3.22"  # https://github.com/kvesteri/sqlalchemy-utils/issues/474
+SQLAlchemy = ">=1.3.22, <1.4.0"  # https://github.com/kvesteri/sqlalchemy-utils/issues/474
 sqlalchemy-migrate = "*"
 SQLAlchemy-Utils = "!=0.36.8"  # https://github.com/kvesteri/sqlalchemy-utils/issues/462
 sqlitedict = "*"