diff --git a/netops-mcp-server/pyproject.toml b/netops-mcp-server/pyproject.toml
index a40ffc3..f584e2a 100644
--- a/netops-mcp-server/pyproject.toml
+++ b/netops-mcp-server/pyproject.toml
@@ -10,7 +10,7 @@ dependencies = [
     "cryptography>=50.0.0",  # CVE-2026-69247 and prior crypto CVEs (transitive via paramiko / PyJWT)
     "paramiko>=5.0.0",  # CVE-2026-44405 (transitive via netmiko)
     "python-multipart>=0.0.32",  # CVE-2026-40347 (transitive via Starlette/FastMCP)
-    "starlette>=1.4.1",  # CVE-2026-54283, CVE-2026-48818 (transitive via FastMCP / sse-starlette)
+    "starlette>=1.6.0",  # CVE-2026-54283, CVE-2026-48818 (transitive via FastMCP / sse-starlette)
     "mcp>=1.28.1",  # CVE-2026-59950, CVE-2026-52869/52870 (transitive via FastMCP)
     "pydantic-settings>=2.15.0",  # GHSA-4xgf-cpjx-pc3j (transitive via FastMCP / mcp)
     "pygments>=2.20.0",  # CVE-2026-4539 (transitive via pytest rich output)
diff --git a/netops-mcp-server/uv.lock b/netops-mcp-server/uv.lock
index defcbd1..153fe8d 100644
--- a/netops-mcp-server/uv.lock
+++ b/netops-mcp-server/uv.lock
@@ -915,7 +915,7 @@ requires-dist = [
     { name = "python-multipart", specifier = ">=0.0.32" },
     { name = "requests", specifier = ">=2.34.2" },
     { name = "ruff", marker = "extra == 'dev'" },
-    { name = "starlette", specifier = ">=1.4.1" },
+    { name = "starlette", specifier = ">=1.6.0" },
 ]
 provides-extras = ["dev"]
 
@@ -1631,8 +1631,8 @@ name = "secretstorage"
 version = "3.5.0"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
-    { name = "cryptography", marker = "sys_platform != 'win32'" },
-    { name = "jeepney", marker = "sys_platform != 'win32'" },
+    { name = "cryptography" },
+    { name = "jeepney" },
 ]
 sdist = { url = "https://files.pythonhosted.org/packages/1c/03/e834bcd866f2f8a49a85eaff47340affa3bfa391ee9912a952a1faa68c7b/secretstorage-3.5.0.tar.gz", hash = "sha256:f04b8e4689cbce351744d5537bf6b1329c6fc68f91fa666f60a380edddcd11be", size = 19884, upload-time = "2025-11-23T19:02:53.191Z" }
 wheels = [
@@ -1654,15 +1654,15 @@ wheels = [
 
 [[package]]
 name = "starlette"
-version = "1.4.1"
+version = "1.6.0"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "anyio" },
     { name = "typing-extensions", marker = "python_full_version < '3.13'" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/0f/3c/76d2fd1f1357ed0f0108d8a5aa233dcf16e2946a8559c84912fe08e01ac7/starlette-1.4.1.tar.gz", hash = "sha256:b7332de6e9375593a29ba9eee1e6ecfeb3eb2043e2e19a13b4b71da73ff35540", size = 2709041, upload-time = "2026-08-05T15:17:26.23Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/b5/b4/205b0d5241d934e8add0c38aa924c4f9fb7330834ff11e5444db964ec3f9/starlette-1.6.0.tar.gz", hash = "sha256:d4e3ac5e546444960c710297a3c9fc3f7ebae1b7e963f3d36173b49da535be9b", size = 2716969, upload-time = "2026-08-08T18:27:57.512Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/75/0a/67e95f21498de41433babf7b1db0eeab449eb58872dfb831b27747a70fd0/starlette-1.4.1-py3-none-any.whl", hash = "sha256:7d078e0fbefae0d2cecfb80a799d6fb84b1c0c6acd4f14ac79d17d0e7ec27f19", size = 74019, upload-time = "2026-08-05T15:17:24.357Z" },
+    { url = "https://files.pythonhosted.org/packages/c8/cb/6a6a47d5b464bd08695d254f3da6e7986cc70c9fa5d778eda57538edfe56/starlette-1.6.0-py3-none-any.whl", hash = "sha256:a86dd39d14bb45f85a3d18525215a9ef0cfd1f192ac793220e72598c90335f0c", size = 75969, upload-time = "2026-08-08T18:27:56.196Z" },
 ]
 
 [[package]]