diff --git a/requirements.txt b/requirements.txt
index c2352bbc8..c2d8f80ea 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -118,7 +118,7 @@ paramiko==2.0.9     # rq.filter: >=2.0,  <2.1
 # Pillow
 #   Note: replaces obsolete PIL
 #   https://www.djangoproject.com/weblog/2015/jan/02/pillow-security-release/
-pillow==5.4.1
+pillow==9.0.1
 
 # Plone
 #   CVE-2017-5524