diff --git a/go.mod b/go.mod
index c520a8a978f6..df898f0bb572 100644
--- a/go.mod
+++ b/go.mod
@@ -204,7 +204,7 @@ require (
 	github.com/cloudflare/cbpfc v0.0.0-20240920015331-ff978e94500b
 	github.com/cloudfoundry-community/go-cfclient/v2 v2.0.1-0.20230503155151-3d15366c5820
 	github.com/containerd/cgroups/v3 v3.1.2
-	github.com/containerd/containerd v1.7.35
+	github.com/containerd/containerd v1.7.36
 	github.com/containerd/containerd/api v1.9.0
 	github.com/containerd/errdefs v1.0.0
 	github.com/containerd/typeurl/v2 v2.2.3
diff --git a/go.sum b/go.sum
index 43960950c75e..76845e1cacf5 100644
--- a/go.sum
+++ b/go.sum
@@ -3045,8 +3045,8 @@ github.com/codegangsta/inject v0.0.0-20150114235600-33e0aa1cb7c0 h1:sDMmm+q/3+Bu
 github.com/codegangsta/inject v0.0.0-20150114235600-33e0aa1cb7c0/go.mod h1:4Zcjuz89kmFXt9morQgcfYZAYZ5n8WHjt81YYWIwtTM=
 github.com/containerd/cgroups/v3 v3.0.5 h1:44na7Ud+VwyE7LIoJ8JTNQOa549a8543BmzaJHo6Bzo=
 github.com/containerd/cgroups/v3 v3.0.5/go.mod h1:SA5DLYnXO8pTGYiAHXz94qvLQTKfVM5GEVisn4jpins=
-github.com/containerd/containerd v1.7.35 h1:7AU2T1qI2OdNBmKkreWZ7kASHUNFItN5Hgejd9sY938=
-github.com/containerd/containerd v1.7.35/go.mod h1:ozI//0TomTCLPhQREnx0IXDIQMg+Fk7yTtg9fNvU8EQ=
+github.com/containerd/containerd v1.7.36 h1:HyMsOG5kmp1LQsGzqwI6Ts06T4VpYZbszfDZYB0bW5w=
+github.com/containerd/containerd v1.7.36/go.mod h1:ozI//0TomTCLPhQREnx0IXDIQMg+Fk7yTtg9fNvU8EQ=
 github.com/containerd/containerd/api v1.9.0 h1:HZ/licowTRazus+wt9fM6r/9BQO7S0vD5lMcWspGIg0=
 github.com/containerd/containerd/api v1.9.0/go.mod h1:GhghKFmTR3hNtyznBoQ0EMWr9ju5AqHjcZPsSpTKutI=
 github.com/containerd/containerd/v2 v2.1.3 h1:eMD2SLcIQPdMlnlNF6fatlrlRLAeDaiGPGwmRKLZKNs=
diff --git a/scripts/test_embedded_python_security.py b/scripts/test_embedded_python_security.py
index 5d64d464e615..af385b24498f 100644
--- a/scripts/test_embedded_python_security.py
+++ b/scripts/test_embedded_python_security.py
@@ -1,4 +1,4 @@
-"""Check security backports using the packaged Python interpreter."""
+"""Check security fixes using the packaged Python interpreter and dependencies."""
 
 import hashlib
 import io
@@ -10,10 +10,23 @@
 import unittest
 from pathlib import Path
 
+import jwt
 from build._compat.tarfile import safe_extractall
 
 
 class EmbeddedPythonSecurityTests(unittest.TestCase):
+    def test_jwt_options_reuse_preserves_claim_verification(self):
+        # CVE-2026-103001: an unsigned inspection must not mutate reusable
+        # options and disable expiry checking on a later verified decode.
+        secret = 'embedded-python-security-test-key'
+        token = jwt.encode({'exp': 1}, secret, algorithm='HS256')
+        options = {'verify_signature': False}
+        self.assertEqual(jwt.decode(token, options=options), {'exp': 1})
+        self.assertEqual(options, {'verify_signature': False})
+        options['verify_signature'] = True
+        with self.assertRaises(jwt.ExpiredSignatureError):
+            jwt.decode(token, secret, algorithms=['HS256'], options=options)
+
     def test_idna_uses_unicode_3_2_case_folding(self):
         cases = (
             ("\N{CHEROKEE LETTER A}\N{CHEROKEE LETTER A}", b"xn--58da"),
diff --git a/stackstate-deps.json b/stackstate-deps.json
index 65c5fbae04f8..8b578f6020bf 100644
--- a/stackstate-deps.json
+++ b/stackstate-deps.json
@@ -1,5 +1,5 @@
 {
-  "STACKSTATE_INTEGRATIONS_VERSION": "7.78.2-6",
+  "STACKSTATE_INTEGRATIONS_VERSION": "f50c336c6b23beb3f2e651dca558e1dba6a5781a",
   "PROCESS_AGENT_BRANCH": "master",
   "PROCESS_AGENT_VERSION": "6737762f",
   "OMNIBUS_SOFTWARE_VERSION": "7.78.2",