diff --git a/backend/requirements.txt b/backend/requirements.txt
index e36217a..3a42709 100644
--- a/backend/requirements.txt
+++ b/backend/requirements.txt
@@ -1,5 +1,5 @@
 # Web framework — starlette pulled transitively; floor raised to patched releases.
-fastapi>=0.115.6
+fastapi>=0.140.0
 uvicorn[standard]>=0.30.6
 # python-multipart < 0.0.18 has a DoS CVE (GHSA-2jv5-9r88-3w3p / 59gj).
 python-multipart>=0.0.32