Skip to content

Docs - Upgrade pillow to resolve CVE-2026-112398 (and others) - #65

Open
cigamit wants to merge 1 commit into
develfrom
CVE-2026-112398
Open

cigamit wants to merge 1 commit into
develfrom
CVE-2026-112398

Conversation

@cigamit

@cigamit cigamit commented Oct 24, 2026

Copy link
Copy Markdown
Collaborator

No description provided.

@cigamit
cigamit requested a review from TheWitness October 24, 2026 05:05
@cigamit cigamit self-assigned this Oct 24, 2026
@cigamit cigamit added the documentation Improvements or additions to documentation label Oct 24, 2026
Copilot AI balanced review requested due to automatic review settings October 24, 2026 05:05
@ciq-it-service-account

ciq-it-service-account commented Oct 24, 2026 •

Copy link
Copy Markdown

✅ Snyk checks have passed. No issues have been found so far.

Status Scan Engine Critical High Medium Low Total (0)
✅ Open Source Security 0 0 0 0 0 issues
✅ Licenses 0 0 0 0 0 issues
✅ Code Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟢 Approval recommended

The targeted dependency update is compatible with the configured documentation Python versions, and no blocking issues were identified.

No open issues 🎉

What changed in this PR

This PR updates Pillow in the documentation dependencies to address the security vulnerabilities identified in the PR title.

Changes:

  • Bumps the pinned Pillow version from 12.3.0 to 13.0.0.
File Description
docs/​requirements.txt Updates the Pillow dependency used by documentation builds.

Review effort: Balanced

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

documentation Improvements or additions to documentation

Development

Successfully merging this pull request may close these issues.

3 participants