diff --git a/requirements.txt b/requirements.txt
index 2930223..8e242ae 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -1,5 +1,5 @@
 fastmcp>=3.4.5
 httpx>=0.28.1
-Pillow>=12.2.0
+Pillow>=12.3.0
 # SSRF hardening for outbound Substack API fetch (MYC-101).
 mycelium-security @ git+https://github.com/adelaidasofia/mycelium-security.git@v0.1.1