SECURITY: Update dependencies to fix 11 vulnerabilities (aiohttp, authlib, cryptography, fastapi, python-multipart)

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>

backend/requirements.txt

@@ -1,5 +1,5 @@
 # Core Framework
-fastapi==0.109.0
+fastapi==0.109.1  # Updated: Fixed ReDoS vulnerability (was 0.109.0)
 uvicorn[standard]==0.27.0
 pydantic==2.5.3
 pydantic-settings==2.1.0
@@ -13,8 +13,8 @@ asyncpg==0.29.0
 # Authentication
 python-jose[cryptography]==3.3.0
 passlib[bcrypt]==1.7.4
-python-multipart==0.0.6
-authlib==1.3.0
+python-multipart==0.0.22  # Updated: Fixed multiple vulnerabilities (was 0.0.6)
+authlib==1.6.5  # Updated: Fixed algorithm confusion and DoS vulnerabilities (was 1.3.0)
 httpx==0.26.0
 
 # Payment Processing
@@ -22,7 +22,7 @@ stripe==7.11.0
 
 # Email & Mail Processing
 aiosmtplib==3.0.1
-aiohttp==3.9.1
+aiohttp==3.13.3  # Updated: Fixed zip bomb, DoS, and directory traversal vulnerabilities (was 3.9.1)
 aioimaplib==1.0.1
 email-validator==2.1.0.post1
 
@@ -31,7 +31,7 @@ celery==5.3.6
 redis==5.0.1
 
 # Security & Encryption
-cryptography==42.0.0
+cryptography==42.0.4  # Updated: Fixed NULL pointer dereference (was 42.0.0)
 
 # Notifications
 apprise==1.7.1