diff --git a/CHANGELOG.md b/CHANGELOG.md
index f9cb061..df56d2f 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -26,5 +26,6 @@ All notable changes to this project are documented in this file.
 - Theme watcher startup and wallpaper cycling now avoid first-run double-cycle races.
 
 ### Security
+- Raised the minimum Pillow version to `12.2.0` to exclude vulnerable releases.
 - Path overrides in setup/install flows are validated and constrained to the current user home.
 - LaunchAgent plist rendering now XML-escapes substituted install paths.
diff --git a/requirements.txt b/requirements.txt
index f58bc9f..c1a4c7e 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -1,2 +1,2 @@
-Pillow>=10.0
+Pillow>=12.2.0
 pyobjc-framework-Quartz>=10.0