You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Would it be possible to have a security patch release (13.0.1)?
Some libraries have dependency trees that pull in pillow and our security scanners constantly flag our builds due to CVE-2026-111497, which was fixed in: OpenCTI-Platform/connectors#8108
Activity
[-]Release Pillow 13.1.0 on January 1, 2027[/-][+]Release Pillow 13.1.0 on January 2, 2027[/+]jponf commentedon Nov 4, 2026
Hi @aclark4life.
Would it be possible to have a security patch release (13.0.1)?
Some libraries have dependency trees that pull in pillow and our security scanners constantly flag our builds due to CVE-2026-111497, which was fixed in: OpenCTI-Platform/connectors#8108
radarhere commentedon Nov 4, 2026
Hi @jponf. There's currently a discussion about this over at #10386. Have a read, and comment if you would like to add anything.