diff --git a/pyproject.toml b/pyproject.toml
index 8370ec6..f198f49 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -14,12 +14,12 @@ authors = [
 ]
 
 dependencies = [
-    "litellm>=1.70.0,<1.82.7",  # pinned to avoid PYSEC-2026-2 supply-chain compromise (1.82.7/1.82.8 were malicious)
+    "litellm>=1.83.7,<2.0.0",  # CVE-2026-42271 fixed in 1.83.7; also excludes PYSEC-2026-2 malicious 1.82.7/1.82.8
     "python-dotenv>=1.0.0",
     "openai>=1.0.0",
     "jsonschema>=4.25.0",
     "bashlex>=0.18",
-    "mcp>=1.0.0",
+    "mcp>=1.0.0,<2.0.0",  # 2.0 removed mcp.server.fastmcp which server.py imports
     "anthropic>=0.71.0",
     "pillow>=12.0.0",
     "numpy>=1.24.0",