diff --git a/backend/requirements.txt b/backend/requirements.txt
index e36217a..9013590 100644
--- a/backend/requirements.txt
+++ b/backend/requirements.txt
@@ -12,7 +12,7 @@ PyJWT>=2.13.0
 google-auth>=2.0.0
 psycopg2-binary>=2.9.12
 # Pillow < 10.3 has multiple image-parsing CVEs (buffer overflow).
-Pillow>=12.2.0
+Pillow>=12.3.0
 # Jinja2 < 3.1.6 has sandbox-escape / template CVEs.
 jinja2>=3.1.6
 pytest>=8.0.0