[Aikido] Fix security issue in msgpack 1.1.2 by using Aikido Library in requirements

[aikido-autofix]

Overview

Upgrade msgpack to fix critical DoS and SEGV vulnerabilities in Unpacker error handling when processing untrusted input.

Claims

• Details

✅ 1 CVE resolved by this upgrade

This PR will resolve the following CVEs:

Issue	Severity	Description
GHSA-6v7p-g79w-8964	HIGH	[msgpack] Reusing the Unpacker after an error occurs can cause a process crash (SEGV) or enable denial-of-service attacks when processing untrusted input. The vulnerability is triggered by repeated use of the same Unpacker instance following an error condition.

Validation

Details

✅ There are no breaking changes

Related Tasks & Ticket Links:

🔗 Related Tasks

• https://aikido.atlassian.net/browse/AIK-20722

---

Pull Request Checklist

• I used vLLM's /pr-checklist skill. (Mandatory for agents, optional for humans).

• AI assistance was used during the creation of this PR.

• Design Fit: Minimizes impact on core components, reuses existing functionality, and justifies added complexity.

• Testing and Validation: Validates the change and ensures any added tests are meaningful and reliable, with CI coverage or documented CI resource constraints and validation performed outside CI.

• Code Quality and Style: Keeps code and comments clear and concise, and updates relevant documentation and examples.

• Pull Request Contents: Includes a brief summary and relevant links, supports claims with evidence, explains root causes and implementation trade-offs, and follows the contributing guide.

BEFORE SUBMITTING, PLEASE READ https://docs.vllm.ai/en/latest/contributing (anything written below this line will be removed by GitHub Actions)

[aikido-autofix]

Closed by Aikido: the vulnerabilities are already resolved.