cve fixes

Signed-off-by: wwanarif <[email protected]>

Author: wanhakim

app-backend/Dockerfile

@@ -26,7 +26,8 @@ RUN git clone --depth 1 https://github.com/opea-project/GenAIComps.git
 WORKDIR /home/user/GenAIComps
 RUN pip install --no-cache-dir --upgrade pip==24.3.1 setuptools==78.1.1 && \
     pip install --no-cache-dir -r /home/user/GenAIComps/requirements.txt && \
-    pip install --no-cache-dir --upgrade mcp==1.10.0 pillow==11.3.0
+    pip install --no-cache-dir --upgrade mcp==1.23.0 pillow==11.3.0 \
+    langchain-core==0.3.80 urllib3==2.6.0 starlette==0.49.1
 
 COPY ./templates/microservices/* /home/user/templates/microservices/
 COPY ./megaservice.py /home/user/megaservice.py

studio-backend/app/requirements.txt

@@ -1,10 +1,10 @@
-fastapi==0.115.4
+fastapi==0.120.0
 uvicorn==0.30.6
 kubernetes==30.1.0
 requests==2.32.3
-urllib3==2.0.0
+urllib3==2.6.0
 pydantic==1.10.18
-starlette==0.41.2
+starlette==0.49.1
 websockets==10.3
 clickhouse-driver==0.2.9
 paramiko==3.5.1

studio-backend/tests/requirements.txt

@@ -1,6 +1,6 @@
 pytest==8.3.3
-fastapi==0.115.0
+fastapi==0.120.0
 httpx==0.27.2
 kubernetes==30.1.0
 pydantic==1.10.18
-urllib3==2.0.0
+urllib3==2.6.0

studio-frontend/package.json

@@ -59,7 +59,11 @@
         ],
         "overrides": {
             "set-value": "^3.0.3",
-            "form-data": "4.0.4"
+            "form-data": "4.0.4",
+            "@modelcontextprotocol/sdk": "1.24.0",
+            "axios": "1.12.0",
+            "cross-spawn": "7.0.5",
+            "glob": "11.1.0"
         },
         "peerDependencyRules": {
             "ignoreMissing": [],
@@ -75,14 +79,15 @@
         "@google/generative-ai": "^0.15.0",
         "openai": "4.57.3",
         "@langchain/core": "0.2.18",
-        "axios": "1.8.2",
+        "axios": "1.12.0",
         "nth-check": "2.0.1",
         "pdfjs-dist": "4.2.67",
         "prismjs": "1.27.0",
         "semver": "7.5.2",
         "ws": "8.17.1",
         "esbuild": ">=0.25.0",
-        "cross-spawn": ">=7.0.5",
+        "cross-spawn": "7.0.5",
+        "glob": "11.1.0",
         "solid-js": ">=1.9.4",
         "tar-fs": ">=3.0.8",
         "form-data": "4.0.4",