Pillow versions before v10.0.1 bundled libwebp binaries in wheels that are vulnerable to GHSA-hhrh-69hc-fgg7 (previously GHSA-j7hp-h8jx-5ppr). Pillow v10.0.1 upgrades the bundled libwebp binary to v1.3.2.
Unfortunately there are some functions removed in Pillow 10.0.0
https://pillow.readthedocs.io/en/stable/deprecations.html
pi3d make use of ImageFont.getsize() wich should be replaced by ImageFont.getbbox() and ImageFont.getlength()