fix(deps): address critical and high severity security vulnerabilities

Bump minimum versions for 10 packages with known CVEs via
constraint-dependencies and direct version pins:

- aiohttp >=3.13.4 (10 CVEs: CRLF injection, header leak, DoS)
- authlib >=1.6.11 (8 CVEs: account takeover, JWE padding oracle)
- cryptography >=46.0.7 (3 CVEs: buffer overflow, DNS bypass)
- gitpython >=3.1.47 (2 CVEs: command injection)
- litellm >=1.83.7 (4 CVEs: privilege escalation, auth bypass, RCE)
- pillow >=12.2.0 (5 CVEs: heap overflow, OOB write, DoS)
- pypdf >=6.10.2 (8 CVEs: RAM exhaustion, infinite loops)
- python-socketio >=5.14.0 (1 CVE: RCE via pickle deserialization)
- transformers >=5.0.0 (1 CVE: arbitrary code execution in Trainer)
- werkzeug >=3.1.6 (3 CVEs: safe_join device name bypass)

Reduces total known vulnerabilities from 60 to 15 (medium/low only).

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Sébastien Han <seb@redhat.com>
Co-authored-by: multica-agent <github@multica.ai>

Author: 3 people

pyproject.toml

@@ -8,14 +8,20 @@ fallback_version = "0.8.1.dev0"
 [tool.uv]
 required-version = ">=0.7.0"
 constraint-dependencies = [
-    "aiohttp>=3.13.3",
+    "aiohttp>=3.13.4",                # CVE-2026-34514 + 9 more: CRLF injection, header leak, DoS
+    "authlib>=1.6.11",                 # CVE-2026-41425 + 7 more: account takeover, JWE padding oracle, sig bypass
+    "cryptography>=46.0.7",            # CVE-2026-39892: buffer overflow; CVE-2026-34073: DNS constraint bypass
     "fonttools>=4.60.2",
+    "gitpython>=3.1.47",               # Command injection via Git options bypass
     "h11>=0.16.0",
-    "pyasn1>=0.6.3",  # CVE-2026-30922: DoS via unbounded recursion
+    "pillow>=12.2.0",                  # CVE-2026-40192 + 4 more: heap overflow, OOB write, DoS
+    "pyasn1>=0.6.3",                   # CVE-2026-30922: DoS via unbounded recursion
     "python-multipart>=0.0.22",
+    "python-socketio>=5.14.0",         # CVE-2025-61765: RCE via pickle deserialization
     "starlette>=0.49.1",
     "tornado>=6.5.5",
     "urllib3>=2.6.3",
+    "werkzeug>=3.1.6",                 # CVE-2025-66221 + 2 more: safe_join() device name bypass
 ]
 
 [project]
@@ -100,7 +106,7 @@ starter = [
     "pymilvus[milvus-lite]>=2.4.10",
     "pymongo",
     "markitdown[all]",
-    "pypdf>=6.7.2",
+    "pypdf>=6.10.2",
     "pythainlp",
     "qdrant-client",
     "redis",
@@ -140,7 +146,7 @@ dev = [
     "ollama",
     "ogx-client>=0.8.0",
     "chardet",
-    "pypdf>=6.7.2",
+    "pypdf>=6.10.2",
     "together",
     "boto3",
     "anthropic",
@@ -154,7 +160,7 @@ type_checking = [
     "types-setuptools",
     "types-jsonschema",
     "markitdown[all]",
-    "pypdf>=6.7.2",
+    "pypdf>=6.10.2",
     "pandas-stubs",
     "types-psutil",
     "types-tqdm",
@@ -194,14 +200,14 @@ unit = [
     "aiohttp",
     "psycopg2-binary>=2.9.0",
     "markitdown[all]",
-    "pypdf>=6.7.2",
+    "pypdf>=6.10.2",
     "mcp>=1.23.0",
     "chardet",
     "sqlalchemy",
     "sqlalchemy[asyncio]>=2.0.41",
     "blobfile",
     "faiss-cpu",
-    "litellm",
+    "litellm>=1.83.7",
     "together",
     "coverage",
     "moto[s3]>=5.1.10",
@@ -217,11 +223,11 @@ test = [
     "torchvision>=0.21.0",
     "chardet",
     "psycopg2-binary>=2.9.0",
-    "pypdf>=6.7.2",
+    "pypdf>=6.10.2",
     "mcp>=1.23.0",
     "datasets>=4.0.0",
     "autoevals",
-    "transformers",
+    "transformers>=5.0.0",
     "sqlalchemy",
     "sqlalchemy[asyncio]>=2.0.41",
     "requests",