Upgrade pillow to 12.1.1 for OOB writes CVE #1870

Unanswered

panjingyuan asked this question in Q&A

panjingyuan
Feb 13, 2026

Hi everyone,

Is there any plan to update dependency of pillow to version >=12.1.1 because our current dependency pillow = "^10.1.0" is flagged for OOB write CVE
https://github.com/python-pillow/Pillow/releases/tag/12.1.1

Thanks

Replies: 0 comments

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment