diff --git a/dev_requirements.txt b/dev_requirements.txt
index c0226e14..1d8545ee 100644
--- a/dev_requirements.txt
+++ b/dev_requirements.txt
@@ -5,7 +5,7 @@ je_web_runner_dev
 sphinx-rtd-theme
 Pyside6
 defusedxml
-Pillow
+Pillow>=12.3.0
 faker
 sqlalchemy
 pytest
diff --git a/pyproject.toml b/pyproject.toml
index fd79ce8c..c8e14081 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -24,7 +24,9 @@ dependencies = [
     'python-dotenv',
     "webdriver-manager",
     "defusedxml",
-    "Pillow",
+    # Floor set to the first release without the known Pillow advisories;
+    # wheels cover cp310-cp315, so it excludes no supported interpreter.
+    "Pillow>=12.3.0",
 ]
 classifiers = [
     "Development Status :: 2 - Pre-Alpha",
diff --git a/requirements.txt b/requirements.txt
index a0795c57..9349904b 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -1,5 +1,5 @@
 je_web_runner
 defusedxml
-Pillow
+Pillow>=12.3.0
 faker
 sqlalchemy