aiofiles==25.1.0
aiohappyeyeballs==2.7.1
aiohttp==3.14.5
aiosignal==1.4.0
aiosqlite==0.22.1
alembic==1.20.0
annotated-doc==0.0.5
annotated-types==0.8.0
anyio==4.15.1
APScheduler==3.11.3
asyncmy==0.2.16  # CVE-2025-65896 (SQLi via crafted dict keys) fixed upstream in 0.2.12+
attrs==26.1.0
bcrypt==5.0.0
bleach==6.4.0
boto3==1.43.114
botocore==1.43.114
certifi==2026.7.22
cffi==2.1.1
charset-normalizer==3.5.2
click==8.5.0
contourpy==1.4.0
croniter==6.2.4
cryptography==50.0.2
cycler==0.12.1
defusedxml==0.7.1
dnspython==2.9.0
email-validator==2.3.0
fastapi==0.143.2
fonttools==4.67.0
frozenlist==1.8.0
greenlet==3.5.6
h11==0.16.0
httpcore==1.0.9
httpx==0.28.1
httpx-oauth==0.17.0
idna==3.20
influxdb-client==1.50.0
invoke==3.0.3
itsdangerous==2.2.0
Jinja2==3.1.6
jmespath==1.1.0
kiwisolver==1.5.1
lark==1.3.1
ldap3==2.9.1
Mako==1.4.3
Markdown==3.11.1
MarkupSafe==3.0.4
matplotlib==3.11.2
multidict==7.1.0
netaddr==1.3.0
numpy==2.5.4
packaging==26.3
paramiko==5.0.0
pillow==12.3.0
prometheus_client==0.26.0
propcache==0.5.4
psutil==7.2.2
pyasn1==0.6.4
pycparser==3.11
pycryptodome==4.0.0
pydantic==2.14.1
pydantic-settings==2.16.0
pydantic_core==2.50.1
PyJWT[crypto]==2.15.1
PyMySQL==1.2.3
PyNaCl==1.6.2
pyOpenSSL==26.4.0
pyparsing==3.3.3
pysmi==2.0.0
pysnmp==7.1.30
python-dateutil==2.9.0.post0
python-dotenv==1.2.4
python-multipart==0.0.32
pytz==2026.5
PyYAML==6.0.3
reactivex==5.1.0
redis==8.1.0
reportlab==5.0.1
requests==2.34.2
rsa==4.9.1
s3transfer==0.19.2
six==1.17.0
SQLAlchemy==2.1.4
SQLAlchemy-Utils==0.43.0
starlette==1.8.0
tenacity==9.2.1
typing-inspection==0.4.4
typing_extensions==4.16.0
tzlocal==5.4.4
urllib3==2.8.0
uvicorn==0.54.0
webencodings==0.6.1
websockets==17.2
wheel==0.48.0
yarl==1.25.1

# 2fa + web push
pyotp==2.10.0
py-vapid==1.9.6
pywebpush==2.5.0
pymssql==2.4.4

msgpack==1.2.3  # security: GHSA-6v7p-g79w-8964 (transitive via CacheControl)
impacket==0.13.1
gunicorn==26.2.0
