All products

rembg

PyPI · Package
5 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Rembg: Unauthenticated SAM model injection permits local-file disclosure through malicious ONNX graphsCVE-2026-115924 · GHSA-QR6X-7V33-6QMG rembg PyPI High Fix reported
Rembg has a Path Traversal via Custom Model LoadingCVE-2026-40086 · GHSA-3WQJ-33CG-XC48Version ranges need review. rembg PyPI Medium Fix reported
Rembg allows SSRF via /api/removeCVE-2025-25301 · GHSA-R5GX-C49X-H878Version ranges need review. rembg PyPI Medium Fix reported
Rembg CORS misconfigurationCVE-2025-25302 · GHSA-59QH-FMM7-3G9QVersion ranges need review. rembg PyPI High Fix reported
rembg server is vulnerable to Server-Side Request Forgery (SSRF) and a weak default CORS configurationGHSA-55V6-G8PM-PW4C rembg PyPI Medium Fix reported