Files
claude-engineering-plugin/plugins/compound-engineering/skills/ce-gemini-imagegen/requirements.txt
GruntworkAI e1524287f7
Some checks failed
CI / pr-title (push) Has been cancelled
CI / test (push) Has been cancelled
Release PR / release-pr (push) Has been cancelled
Release PR / publish-cli (push) Has been cancelled
fix(ce-gemini-imagegen): bump Pillow floor to 10.3.0 to clear 4 CVEs (#608)
2026-04-20 12:11:28 -07:00

6 lines
253 B
Plaintext

google-genai>=1.0.0
# Pillow floor bumped above the last known RCE-class CVE affecting this skill.
# 10.3.0 clears: PYSEC-2023-175, GHSA-j7hp-h8jx-5ppr (libwebp OOB),
# GHSA-3f63-hfp8-52jq (arbitrary code execution), GHSA-44wm-f244-xhp3.
Pillow>=10.3.0