# Core Framework fastapi==0.136.3 # Updated: Fixed starlette DoS vulnerabilities (was 0.109.1); pulls in starlette>=1.0.0 uvicorn[standard]==0.48.0 pydantic==2.13.4 pydantic-settings==2.14.1 # Database sqlalchemy==2.0.50 # Updated: Fixed Python 3.14 incompatibility with TypingOnly assertion (was 2.0.25) alembic==1.18.4 psycopg2-binary==2.9.12 asyncpg==0.31.0 # Authentication python-jose[cryptography]==3.5.0 # Updated: Fixed algorithm confusion with OpenSSH ECDSA keys (was 3.3.0) bcrypt==5.0.0 python-multipart==0.0.29 # Updated: Fixed multiple vulnerabilities (was 0.0.6) authlib==1.7.2 # Updated: Fixed OIDC hash binding, JWE RSA1_5 padding oracle, alg:none bypass, JWK header injection (was 1.6.6) httpx==0.28.1 # Payment Processing stripe==15.1.0 # Email & Mail Processing aiosmtplib==5.1.0 aiohttp==3.13.5 # Updated: Fixed zip bomb, DoS, and directory traversal vulnerabilities (was 3.9.1) aioimaplib==2.0.1 email-validator==2.3.0 # Gmail API (for direct email injection) google-api-python-client==2.196.0 google-auth==2.53.0 google-auth-oauthlib==1.4.0 google-auth-httplib2==0.4.0 # Job Queue & Cache celery==5.6.3 redis==7.4.0 # Security & Encryption cryptography==48.0.0 # Updated: Fixed NULL pointer dereference (was 42.0.0) # Notifications apprise==1.10.0 # Monitoring & Logging prometheus-client==0.25.0 python-json-logger==2.0.7 # Development & Testing pytest==9.0.3 pytest-asyncio==1.3.0 pytest-cov==7.1.0 faker==40.19.1 # Utilities python-dotenv==1.2.2 schedule==1.2.2 tenacity==9.1.4