# Core Framework fastapi==0.135.2 # Updated: Fixed starlette DoS vulnerabilities (was 0.109.1); pulls in starlette>=1.0.0 uvicorn[standard]==0.27.0 pydantic==2.12.5 pydantic-settings==2.13.1 # Database sqlalchemy==2.0.48 # Updated: Fixed Python 3.14 incompatibility with TypingOnly assertion (was 2.0.25) alembic==1.13.1 psycopg2-binary==2.9.11 asyncpg==0.31.0 # Authentication python-jose[cryptography]==3.5.0 # Updated: Fixed algorithm confusion with OpenSSH ECDSA keys (was 3.3.0) bcrypt==4.3.0 python-multipart==0.0.22 # Updated: Fixed multiple vulnerabilities (was 0.0.6) authlib==1.6.9 # Updated: Fixed OIDC hash binding, JWE RSA1_5 padding oracle, alg:none bypass, JWK header injection (was 1.6.6) httpx==0.26.0 # Payment Processing stripe==14.4.1 # Email & Mail Processing aiosmtplib==3.0.1 aiohttp==3.13.3 # Updated: Fixed zip bomb, DoS, and directory traversal vulnerabilities (was 3.9.1) aioimaplib==2.0.1 email-validator==2.1.0.post1 # Gmail API (for direct email injection) google-api-python-client==2.193.0 google-auth==2.49.1 google-auth-oauthlib==1.2.0 google-auth-httplib2==0.3.0 # Job Queue & Cache celery==5.6.2 redis==7.3.0 # Security & Encryption cryptography==46.0.6 # Updated: Fixed NULL pointer dereference (was 42.0.0) # Notifications apprise==1.7.1 # Monitoring & Logging prometheus-client==0.19.0 python-json-logger==2.0.7 # Development & Testing pytest==7.4.4 pytest-asyncio==0.23.3 pytest-cov==4.1.0 faker==22.6.0 # Utilities python-dotenv==1.0.0 schedule==1.2.0 tenacity==9.1.4