diff --git a/backend/requirements.txt b/backend/requirements.txt
index eea7a6c..38149e9 100644
--- a/backend/requirements.txt
+++ b/backend/requirements.txt
@@ -2,9 +2,9 @@
 # This mirrors the root requirements.txt (Vercel uses the root one).
 fastapi==0.115.8
 uvicorn==0.34.0
-python-multipart==0.0.20
+python-multipart==0.0.27
 python-telegram-bot==21.10
 httpx==0.28.1
 pydantic==2.10.6
-pypdf==5.1.0
+pypdf==6.12.0
 python-docx==1.1.2
diff --git a/requirements.txt b/requirements.txt
index 98fd36c..c83844a 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -6,7 +6,7 @@
 # --- Web framework + server -----------------------------------------
 fastapi==0.115.8
 uvicorn==0.34.0
-python-multipart==0.0.20      # required by FastAPI for file uploads / forms
+python-multipart==0.0.27      # required by FastAPI for file uploads / forms
 
 # --- Telegram bot (unchanged) ---------------------------------------
 python-telegram-bot==21.10
@@ -18,7 +18,7 @@ httpx==0.28.1
 pydantic==2.10.6
 
 # --- File text extraction for the upload feature --------------------
-pypdf==5.1.0                  # PDF text extraction
+pypdf==6.12.0                  # PDF text extraction
 python-docx==1.1.2            # DOCX text extraction
 
 # NOTE: Password hashing and JWT are implemented with the Python