From 724a019bd6a9bf37a28e446859e8533530f92065 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E6=B4=AA=E7=A3=8A?= <honglei.1@bytedance.com>
Date: Fri, 17 Apr 2026 12:50:10 +0800
Subject: [PATCH] fix(*): fix cve

---
 libs/components/pyproject.toml |  2 +-
 requirements.txt               | 14 +++++++-------
 2 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/libs/components/pyproject.toml b/libs/components/pyproject.toml
index 0844b38..06e1908 100644
--- a/libs/components/pyproject.toml
+++ b/libs/components/pyproject.toml
@@ -19,7 +19,7 @@ dev = [
 ]
 integrations = [
     "mcp>=1.9.4",
-    "langchain-core>=0.3.0",
+    "langchain-core>=0.3.84",
 ]
 
 [build-system]
diff --git a/requirements.txt b/requirements.txt
index 983e087..76fa674 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -43,15 +43,15 @@ opentelemetry-sdk==1.33.1
 opentelemetry-semantic-conventions==0.54b1
 orjson==3.10.18
 packaging==24.2
-protobuf==5.29.5
+protobuf==5.29.6
 py==1.11.0
-pycryptodome==3.9.9
+pycryptodome>=3.19.1
 pydantic==2.11.5
 pydantic-core==2.33.2
-pyjwt==2.10.1
+pyjwt>=2.12.0
 python-dotenv==1.1.0
 python-engineio==4.12.2
-python-multipart==0.0.18
+python-multipart>=0.0.22
 python-socketio==5.13.0
 pytz==2020.5
 pyyaml==6.0.2
@@ -63,7 +63,7 @@ six==1.17.0
 sniffio==1.3.1
 soupsieve==2.7
 sqlalchemy==2.0.41
-starlette==0.41.3
+starlette>=0.49.1
 syncer==2.0.3
 tenacity==9.1.2
 tomli==2.2.1
@@ -71,7 +71,7 @@ typing-extensions==4.14.0
 typing-inspect==0.9.0
 typing-inspection==0.4.1
 uptrace==1.27.0
-urllib3==2.4.0
+urllib3>=2.6.0
 uvicorn==0.34.3
 volcengine==1.0.187
 watchfiles==0.20.0
@@ -82,6 +82,6 @@ zstandard==0.23.0
 aiofiles==24.1.0
 httpx>=0.28.1
 httpx-sse>=0.4.0
-langchain-core>=0.3.0
+langchain-core>=0.3.84
 mcp>=1.9.4
 json-schema-to-pydantic>=0.2.6