diff --git a/requirements.txt b/requirements.txt
index 8466fe5..46ef33e 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -1,5 +1,5 @@
 fastmcp>=3.0.0
 httpx>=0.27.0
-Pillow>=10.0.0
+Pillow>=12.2.0
 # SSRF hardening for outbound Substack API fetch (MYC-101).
 mycelium-security @ git+https://github.com/adelaidasofia/mycelium-security.git@v0.1.0