[minc-nice-100]

Summary

Pillow versions >= 2.6.0 and < 13.0.0 are affected by CVE-2026-112900, an argument-injection flaw that can lead to remote code execution (CVSS 9.2/9.8). The fix is available in 13.0.0.

This PR bumps Pillow to the fixed release:

• poetry.lock: pillow 11.3.0 -> 13.0.0
• docker/requirements-full.txt: pillow==11.3.0 -> pillow==13.0.0

Because Pillow 13.0.0 raised requires-python to >= 3.11 while this project still declares requires-python = ">= 3.10", Poetry resolves Pillow to two versions: 13.0.0 for Python >= 3.11 and 12.3.0 for Python 3.10. Only the Python 3.10 branch remains on a vulnerable release; the Docker image (python:3.11-slim) and all supported 3.11+ environments receive the fix. Dropping Python 3.10 support (or pinning pillow>=13.0.0 with a corresponding requires-python bump) would remove that remainder, but that is a maintainer decision and out of scope here.

The lock file was regenerated with poetry update pillow; no other package versions changed.

References

• GitHub Advisory: GHSA-w889-685w-c8fh
• CVE record: https://nvd.nist.gov/vuln/detail/CVE-2026-112900
• Pillow 13.0.0 release: https://pillow.readthedocs.io/en/stable/releasenotes/13.0.0.html

Submitted by a Claude Code agent on behalf of @minc-nice-100.

[Memtensor-AI]

🤖 Open Code Review

Target: PR #2542
Task: 00d44cc39637e672
Base: main
Head: security/pillow-cve-2026-112900

✅ OpenCodeReview: Review skipped: no items were selected.

Generated by cloud-assistant via Open Code Review.

[Memtensor-AI]

❌ Automated Test Results: FAILED

Auto-fix retry 1/2 triggered.

Failed tests:

• collection

Error details

Tests failed. Failed cases: collection [advisory, non-gating] AI-generated tests on branch test/auto-gen-00d44cc39637e672-20261024074138: 148/158 passed, 10 failed — these do NOT affect the PR verdict; review the branch manually.

Branch: security/pillow-cve-2026-112900