Skip to content
OpenAdvisories

Vendor

danielgatis

4 known vulnerabilities.

Products

rembg 4
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.6
    CVE-2026-115924

    Rembg: Unauthenticated SAM model injection permits local-file disclosure through malicious ONNX graphs

    Rembg is a tool to remove images background. Prior to 2.0.82, the public /api/remove endpoint passes attacker-controlled extras.sam_model through rembg/commands/s_command.py to rembg/sessions/sam.py, where it is interpolated into SAM filenames and GitHub down…

    danielgatis rembg rembg PyPI
  • High 8.7
    CVE-2025-25302

    Rembg CORS misconfiguration

    Rembg is a tool to remove images background. In Rembg 2.0.57 and earlier, the CORS middleware is setup incorrectly. All origins are reflected, which allows any website to send cross site requests to the rembg server and thus query any API. Even if authenticat…

    danielgatis rembg rembg PyPI