Security: dependency CVEs from 2026-10-07 scan (2 critical, 14 high) #519

Tracking issue for dependency CVEs surfaced by the Trivy scan on 2026-10-07. Scan totals: 2 critical, 14 high.

P0 -- auth bugs, fixes available

PyJWT 2.13.0 -> 2.14.0 (one bump clears a critical + five highs, all auth-bypass / token-forgery):

• CVE-2026-102268 (critical)
• CVE-2026-102266 -- auth bypass via empty HMAC key acceptance
• CVE-2026-102267 -- verification key substitution via unvalidated JWKS redirects
• CVE-2026-102271 -- auth bypass via DER public keys accepted as HMAC secrets
• CVE-2026-102272 -- token forgery via Unicode BOM handling
• CVE-2026-102273 -- token forgery via public JWK containers as HMAC secrets

Anyone using the SDK's JWT auth is exposed, so this is the one to ship first.

anyio 4.11.0 -> 4.14.2:

• CVE-2026-63374 -- TLS certificate spoofing via improper IDN encoding (critical)

P1 -- highs with clean fixes

• cryptography 49.0.0 -> 50.0.0 -- CVE-2026-69247 (Bleichenbacher oracle in PKCS#7 decryption)
• urllib3 2.6.3 -> 2.8.0 -- CVE-2026-44431, 44432, 97687, 97689 (header leak on redirect, DoS, proxy TLS override)
• pyasn1 0.6.3 -> 0.6.4 -- CVE-2026-59884, 59885, 59886 (DoS via crafted ASN.1)
• langgraph-sdk 0.4.2 -> 0.4.4 -- CVE-2026-104873 (authz bypass via improper resource handler registration)