diff --git a/libraries/microsoft-agents-hosting-fastapi/setup.py b/libraries/microsoft-agents-hosting-fastapi/setup.py
index a8e569b4e..c2c95fe0f 100644
--- a/libraries/microsoft-agents-hosting-fastapi/setup.py
+++ b/libraries/microsoft-agents-hosting-fastapi/setup.py
@@ -14,5 +14,6 @@
     install_requires=[
         f"microsoft-agents-hosting-core=={package_version}",
         "fastapi>=0.104.0",
+        "starlette>=1.0.1",  # CVE-2026-48710 fix
     ],
 )
diff --git a/test_samples/fastapi/requirements.txt b/test_samples/fastapi/requirements.txt
index 555a87ea2..05b10b8b0 100644
--- a/test_samples/fastapi/requirements.txt
+++ b/test_samples/fastapi/requirements.txt
@@ -1,5 +1,6 @@
 # FastAPI sample requirements
 fastapi>=0.104.0
+starlette>=1.0.1  # CVE-2026-48710 fix
 uvicorn[standard]>=0.24.0
 python-dotenv>=1.0.0
 aiohttp>=3.8.0