Skip to content
This repository was archived by the owner on Jun 11, 2026. It is now read-only.

[Snyk] Security upgrade pillow from 9.5.0 to 12.2.0 #64

Open
sihrc wants to merge 1 commit into
base: master
Choose a base branch
from
Open

[Snyk] Security upgrade pillow from 9.5.0 to 12.2.0 #64

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 2 additions & 1 deletion requirements.extra.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,4 +6,5 @@ plotly==4.14.3
python-mnist
torch==1.6.0
datasets==1.15.1
embeddings==0.0.8
embeddings==0.0.8
pillow>=12.2.0 # not directly required, pinned by Snyk to avoid a vulnerability

@cursor cursor Bot May 6, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pillow 12 incompatible with pinned streamlit 0.75.0

High Severity

The pillow>=12.2.0 pin is incompatible with streamlit==0.75.0. Pillow 10+ removed Image.ANTIALIAS and other constants that older Streamlit versions rely on for image processing. This causes an AttributeError during image rendering, breaking interactive demo apps (e.g., MNIST interface).

Fix in Cursor Fix in Web

Triggered by team rule: Ask Clarifying Questions

Reviewed by Cursor Bugbot for commit 271be4a. Configure here.

@cursor cursor Bot May 6, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pillow 12 Python ≥3.10 requirement conflicts with torch 1.6.0

High Severity

pillow>=12.2.0 requires Python ≥3.10, but torch==1.6.0 in the same file only provides wheels for Python 3.6–3.8. This makes the requirements file unsatisfiable on any Python version — pip cannot resolve these constraints together, so installation will always fail.

Additional Locations (1)
Fix in Cursor Fix in Web

Reviewed by Cursor Bugbot for commit 271be4a. Configure here.

Loading