diff --git a/requirements.txt b/requirements.txt
index cc009b8..b9e8a37 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -7,6 +7,9 @@ jinja2==3.1.*
 pydantic==2.8.2
 pydantic-settings==2.*
 python-multipart==0.0.*
+# SessionMiddleware (app/main.py) semneaza cookie-urile de sesiune via itsdangerous.
+# Necesar explicit: nu e tras tranzitiv in imaginea Docker, doar in dev local.
+itsdangerous==2.2.0
 # Fuzzy lookup pentru editorul de mapari operatii (app/mapping.py). Pur Python/C, fara build extern.
 rapidfuzz==3.14.5
 # Criptare creds RAR efemere in submissions (app/crypto.py, Fernet). Zero-storage at rest.