diff --git a/dev-requirements.txt b/dev-requirements.txt
index d32b59862..55aac6eaa 100644
--- a/dev-requirements.txt
+++ b/dev-requirements.txt
@@ -1,4 +1,4 @@
-pytest==9.1.1  # fix CVE-2025-71176; Python 3.10+ required
+pytest==9.1.1
 flake8==7.3.0
 pytest-timeout==2.4.0
 pytest-asyncio==1.4.0
diff --git a/requirements.txt b/requirements.txt
index bc82a8cdf..8587fa87b 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -1,13 +1,13 @@
 # GNS3 Server Core Dependencies
-uvicorn==0.50.2
+uvicorn==0.52.1
 pydantic==2.13.4
-fastapi==0.139.0
+fastapi==0.141.1
 python-multipart==0.0.32
-websockets==16.0
+websockets==17.0.1
 aiohttp>=3.14,<3.15
 aiofiles>=25.1.0,<26.0
 Jinja2>=3.1.6,<3.2
-sentry-sdk>=2.64.0,<3  # optional dependency
+sentry-sdk>=2.67.1,<3  # optional dependency
 psutil>=7.2.2
 async-timeout>=5.0.1,<5.1; python_version < '3.11'  # this library has effectively been upstreamed into Python 3.11+
 distro>=1.9.0
@@ -15,9 +15,9 @@ py-cpuinfo>=9.0.0,<10.0
 greenlet==3.5.3; python_version >= '3.13' # necessary to run sqlalchemy on Python >= 3.13
 sqlalchemy==2.0.51
 aiosqlite==0.22.1
-alembic==1.18.5
+alembic==1.19.1
 bcrypt==5.0.0
-joserfc==1.7.2
+joserfc==1.7.4
 email-validator==2.3.0
 watchdog==6.0.0
 zstandard==0.25.0
@@ -25,7 +25,7 @@ platformdirs>=2.4.0  # fastmcp-slim >=3.4 requires >=4.0.0; upper bound removed
 truststore>=0.10.4; python_version >= '3.10'
 
 # Shared dependencies (also used by AI Copilot)
-telnetlib3==4.0.5
+telnetlib3==5.0.0
 asyncssh>=2.24.0,<3
 typing-extensions>=4.16.0
 requests>=2.34.2