fastapi==0.115.*
uvicorn[standard]==0.30.*
jinja2==3.1.*
# >=0.0.18: CVE-2024-53981 — a malformed multipart boundary made the parser
# emit one log line per byte, burning CPU on any /drivers/upload POST.
python-multipart>=0.0.18,<0.1
pycryptodome==3.20.*
python-dotenv==1.0.*
peewee==3.17.*
# >=10.3: CVE-2024-28219 (buffer overflow in _imagingcms) — icon uploads are
# decoded by Pillow, so this is reachable from untrusted input.
Pillow>=10.3