From ec711751680e40c9a3156ac86cda7dc38c860c75 Mon Sep 17 00:00:00 2001 From: Yousef Moazzam Date: Tue, 21 Jul 2026 10:09:58 +0100 Subject: [PATCH 1/2] Update backend deps which address highest priority security vulnerabilities --- backend/requirements.txt | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/backend/requirements.txt b/backend/requirements.txt index a05bdb1f..51d20913 100644 --- a/backend/requirements.txt +++ b/backend/requirements.txt @@ -5,11 +5,11 @@ certifi==2024.12.14 click==8.1.8 dnspython==2.7.0 email_validator==2.2.0 -fastapi==0.115.6 +fastapi==0.137.2 fastapi-cli==0.0.7 -h11==0.14.0 +h11==0.16.0 httomolib -httpcore==1.0.7 +httpcore==1.0.9 httptools==0.6.4 httpx==0.28.1 idna==3.10 @@ -22,12 +22,12 @@ mdurl==0.1.2 networkx==3.4.2 numpy==2.2.2 packaging==24.2 -pillow==11.1.0 +pillow==12.2.0 pydantic==2.10.5 pydantic_core==2.27.2 Pygments==2.19.1 python-dotenv==1.0.1 -python-multipart==0.0.20 +python-multipart==0.0.31 PyWavelets==1.9.0 PyYAML==6.0.2 rich==13.9.4 @@ -36,7 +36,7 @@ scikit-image==0.25.0 scipy==1.15.1 shellingham==1.5.4 sniffio==1.3.1 -starlette==0.41.3 +starlette==1.3.1 tifffile==2025.1.10 typer==0.15.1 typing_extensions==4.12.2 From a972413e7e0f19fef6f80594dcb622b5b249c0b1 Mon Sep 17 00:00:00 2001 From: Yousef Moazzam Date: Tue, 21 Jul 2026 10:16:00 +0100 Subject: [PATCH 2/2] Remove duplicate pillow dep in requirements file --- backend/requirements.txt | 1 - 1 file changed, 1 deletion(-) diff --git a/backend/requirements.txt b/backend/requirements.txt index 51d20913..81ed6cd8 100644 --- a/backend/requirements.txt +++ b/backend/requirements.txt @@ -43,4 +43,3 @@ typing_extensions==4.12.2 uvicorn==0.34.0 uvloop==0.21.0 watchfiles==1.0.4 -Pillow>=10.0.0