From 1678c893d34f885a5168bbd099fd7e2bcaa460d8 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 16 Dec 2025 23:04:21 +0000 Subject: [PATCH] deps(dev): bump pillow from 8.0.0 to 12.0.0 Bumps [pillow](https://github.com/python-pillow/Pillow) from 8.0.0 to 12.0.0. - [Release notes](https://github.com/python-pillow/Pillow/releases) - [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst) - [Commits](https://github.com/python-pillow/Pillow/compare/8.0.0...12.0.0) --- updated-dependencies: - dependency-name: pillow dependency-version: 12.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- vulnerable-app/requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/vulnerable-app/requirements.txt b/vulnerable-app/requirements.txt index 2a4d9ce..e40e287 100644 --- a/vulnerable-app/requirements.txt +++ b/vulnerable-app/requirements.txt @@ -34,7 +34,7 @@ psycopg2-binary>=2.9.0 # - CVE-2021-25288 (Out-of-bounds Read) # - CVE-2021-25290 (Denial of Service) # - CVE-2021-28675 (Denial of Service) -Pillow==8.0.0 +Pillow==12.0.0 # ----------------------------------------------------------------------------- # YAML Processing - VULNERABLE