diff --git a/requirements/base.txt b/requirements/base.txt
index 48eb1a0a9a7c6..5734f68d715d2 100644
--- a/requirements/base.txt
+++ b/requirements/base.txt
@@ -96,7 +96,7 @@ flask==2.2.5
     #   flask-migrate
     #   flask-sqlalchemy
     #   flask-wtf
-flask-appbuilder==4.3.7
+flask-appbuilder==4.3.9
     # via apache-superset
 flask-babel==1.0.0
     # via flask-appbuilder
diff --git a/setup.py b/setup.py
index f43097b0bfc2a..409859f3553af 100644
--- a/setup.py
+++ b/setup.py
@@ -84,7 +84,7 @@ def get_git_sha() -> str:
         "cryptography>=41.0.2, <41.1.0",
         "deprecation>=2.1.0, <2.2.0",
         "flask>=2.2.5, <3.0.0",
-        "flask-appbuilder>=4.3.7, <5.0.0",
+        "flask-appbuilder>=4.3.9, <5.0.0",
         "flask-caching>=1.11.1, <2.0",
         "flask-compress>=1.13, <2.0",
         "flask-talisman>=1.0.0, <2.0",
diff --git a/superset/config.py b/superset/config.py
index d9e810a09825d..936c8d6d4b6fb 100644
--- a/superset/config.py
+++ b/superset/config.py
@@ -1437,7 +1437,6 @@ def EMAIL_HEADER_MUTATOR(  # pylint: disable=invalid-name,unused-argument
         "style-src": [
             "'self'",
             "'unsafe-inline'",
-            "https://cdn.jsdelivr.net/npm/swagger-ui-dist@5/swagger-ui.css",
         ],
         "script-src": ["'self'", "'strict-dynamic'"],
     },
@@ -1459,7 +1458,6 @@ def EMAIL_HEADER_MUTATOR(  # pylint: disable=invalid-name,unused-argument
         "style-src": [
             "'self'",
             "'unsafe-inline'",
-            "https://cdn.jsdelivr.net/npm/swagger-ui-dist@5/swagger-ui.css",
         ],
         "script-src": ["'self'", "'unsafe-inline'", "'unsafe-eval'"],
     },