Security for developers — including the AI stack you now depend on. Critical CVEs in the dependencies you ship, MCP servers and LLM libraries, plus end-of-life deadlines before they bite. What broke, who it hits, what to patch.