diff --git a/cp2b-workspace/NewLook/backend/requirements.txt b/cp2b-workspace/NewLook/backend/requirements.txt
index 76077af5..5ba9c758 100644
--- a/cp2b-workspace/NewLook/backend/requirements.txt
+++ b/cp2b-workspace/NewLook/backend/requirements.txt
@@ -13,7 +13,7 @@ alembic==1.13.0
 # python-jose removed: library is unmaintained and has unfixed CVEs (algorithm confusion).
 # JWT verification is handled by Supabase (supabase.auth.get_user) — no local JWT lib needed.
 passlib[bcrypt]==1.7.4
-python-multipart==0.0.22  # Updated from 0.0.20 — fixes CVE-2026-24486
+python-multipart==0.0.26  # Updated from 0.0.20 — fixes CVE-2026-24486
 
 # Environment and Configuration
 python-dotenv==1.0.0