Skip to content
OpenAdvisories

Package · PyPI

rembg

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.3
    GHSA-55v6-g8pm-pw4c

    rembg server is vulnerable to Server-Side Request Forgery (SSRF) and a weak default CORS configuration

    # GitHub Security Lab (GHSL) Vulnerability Report, rembg: `GHSL-2024-161`, `GHSL-2024-162` The [GitHub Security Lab](https://securitylab.github.com) team has identified potential security vulnerabilities in [rembg](https://github.com/danielgatis/rembg). We ar…

    rembg PyPI
  • Medium 5.3
    CVE-2026-40086

    Rembg has a Path Traversal via Custom Model Loading

    Rembg is a tool to remove images background. Prior to 2.0.75, a path traversal vulnerability in the rembg HTTP server allows unauthenticated remote attackers to read arbitrary files from the server's filesystem. By sending a crafted request with a malicious m…

    danielgatis rembg rembg PyPI
  • Medium 6.9
    CVE-2025-25301

    Rembg allows SSRF via /api/remove

    Rembg is a tool to remove images background. In Rembg 2.0.57 and earlier, the /api/remove endpoint takes a URL query parameter that allows an image to be fetched, processed and returned. An attacker may be able to query this endpoint to view pictures hosted o…

    danielgatis rembg rembg PyPI