fix: patch 10 security alerts (high + medium + low)

[John Kennedy (jkennedyvz)]

Security Alert Patch (Round 2)

Resolves 10 Dependabot security alerts across high, medium, and low severity tiers. Follows up on #248 which patched the critical + initial high alerts.

Packages Updated

Package	Lib	Old	New	Strategy	CVEs Resolved
urllib3	trt	2.2.3 (py<3.11) / 2.6.3 (py>=3.11)	2.6.3 (single)	Bump min Python to >=3.9	CVE-2026-21441, CVE-2025-66471, CVE-2025-66418, CVE-2025-50182, CVE-2025-50181
requests	trt	2.31.0	2.32.5	Poetry update	CVE-2024-47081, CVE-2024-35195
certifi	trt	2024.2.2	2026.1.4	Poetry update	CVE-2024-39689
idna	trt	3.6	3.11	Poetry update	CVE-2024-3651
langsmith	ai-endpoints	0.4.45	0.7.6	Poetry update	CVE-2026-25528

Key Changes

Python version bump (libs/trt): >=3.8.1 → >=3.9. Python 3.8 reached EOL in October 2024. This was the root cause of the urllib3 split resolution — urllib3 2.6.3 requires Python >=3.9, so Poetry was resolving a vulnerable 2.2.3 for Python <3.11.

CI matrix update: .github/scripts/check_diff.py updated to remove Python 3.8 from trt's test and lint matrices.

CVE Details

• CVE-2026-21441 — urllib3: decompression-bomb safeguards bypassed on redirects (HIGH)
• CVE-2025-66471 — urllib3: streaming API improperly handles highly compressed data (HIGH)
• CVE-2025-66418 — urllib3: unbounded decompression chain (HIGH)
• CVE-2026-25528 — langsmith: SSRF via tracing header (MEDIUM)
• CVE-2025-50182 — urllib3: uncontrolled redirects in browsers (MEDIUM)
• CVE-2025-50181 — urllib3: redirects not disabled when retries disabled (MEDIUM)
• CVE-2024-47081 — requests: .netrc credentials leak via malicious URLs (MEDIUM)
• CVE-2024-35195 — requests: Session doesn't verify after first request (MEDIUM)
• CVE-2024-3651 — idna: denial of service (MEDIUM)
• CVE-2024-39689 — certifi: GLOBALTRUST root certificate removal (LOW)

Not Fixed

• orjson CVE-2025-67221 (Unable to query ai-embed-qa-4; uninformative error #30, LLM Inference fails when inferencing with locally deployed model having same name as API Catalog model #31) — no patched version available yet

Verification

• All lockfiles regenerated
• poetry check passes for both libs
• CI matrix updated for new Python minimum

🤖 Submitted by langster-patch