Skip to content
OpenAdvisories

Vendor

danielgatis

4 known vulnerabilities.

Products

rembg 4
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-40086

    Rembg has a Path Traversal via Custom Model Loading

    Rembg is a tool to remove images background. Prior to 2.0.75, a path traversal vulnerability in the rembg HTTP server allows unauthenticated remote attackers to read arbitrary files from the server's filesystem. By sending a crafted request with a malicious m…

    danielgatis rembg rembg PyPI
  • Medium 6.9
    CVE-2025-25301

    Rembg allows SSRF via /api/remove

    Rembg is a tool to remove images background. In Rembg 2.0.57 and earlier, the /api/remove endpoint takes a URL query parameter that allows an image to be fetched, processed and returned. An attacker may be able to query this endpoint to view pictures hosted o…

    danielgatis rembg rembg PyPI