fix(deps): address additional CVEs in langchain, starlette, mcp, cryptography, and lodash (#5219)

server/dashboard/package.json

@@ -42,7 +42,7 @@
     "cmdk": "^1.0.0",
     "date-fns": "^4.1.0",
     "framer-motion": "^12.23.12",
-    "lodash": "^4.17.21",
+    "lodash": "^4.18.1",
     "lucide-react": "^0.542.0",
     "next": "15.5.18",
     "next-themes": "^0.4.4",

server/dashboard/pnpm-lock.yaml

@@ -102,7 +102,7 @@ importers:
         specifier: ^12.23.12
         version: 12.38.0(react-dom@19.2.5(react@19.2.5))(react@19.2.5)
       lodash:
-        specifier: ^4.17.21
+        specifier: ^4.18.1
         version: 4.18.1
       lucide-react:
         specifier: ^0.542.0

server/requirements.txt

@@ -17,6 +17,7 @@ alembic>=1.13,<2.0
 passlib[bcrypt]>=1.7,<2.0
 bcrypt==4.0.1
 python-jose[cryptography]>=3.3,<4.0
+cryptography>46.0.4
 
 # Anonymous telemetry — on by default, opt out with MEM0_TELEMETRY=false
 posthog>=3.0,<8.0