Vulnerability Database
Blog
FAQ
Docs
arrow_forward
search
light_mode
dark_mode
Vulnerabilities
search
All ecosystems
2199615
AlmaLinux
5919
Alpaquita
15755
Alpine
4608
Android
3674
Azure Linux
17638
BellSoft Hardened Containers
746
Bitnami
9290
Chainguard
1023665
CleanStart
3591
CRAN
14
crates.io
2732
Debian
68367
Echo
7421
GHC
3
GIT
108119
GitHub Actions
55
Go
9203
Hackage
32
Hex
361
Julia
1713
Linux
29974
Mageia
6227
Maven
7040
MinimOS
144419
npm
228733
NuGet
1869
opam
29
openEuler
8800
openSUSE
14455
OSS-Fuzz
4013
Packagist
7095
Pub
11
PyPI
25166
Red Hat
23331
Rocky Linux
4295
Root
19534
RubyGems
5326
SUSE
23168
SwiftURL
60
TuxCare
9512
Ubuntu
65370
VSCode
21
Wolfi
288261
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-55v6-g8pm-pw4c
PyPI/rembg
rembg server is vulnerable to Server-Side Request Forgery (SSRF) and a weak default CORS configuration
10 Apr
Fix available
Severity - 4.3 (Medium)
GHSA-3wqj-33cg-xc48
PyPI/rembg
Rembg has a Path Traversal via Custom Model Loading
10 Apr
Fix available
Severity - 5.3 (Medium)
PYSEC-2026-2274
PyPI/rembg
See record for full details
10 Apr
Fix available
Severity - 5.3 (Medium)
GHSA-59qh-fmm7-3g9q
PyPI/rembg
Rembg CORS misconfiguration
11 Mar 2025
No fix available
Severity - 8.7 (High)
GHSA-r5gx-c49x-h878
PyPI/rembg
Rembg allows SSRF via /api/remove
11 Mar 2025
No fix available
Severity - 6.9 (Medium)
PYSEC-2025-24
PyPI/rembg
See record for full details
03 Mar 2025
Fix available
Severity - 7.5 (High)
PYSEC-2025-25
PyPI/rembg
See record for full details
03 Mar 2025
Fix available
Severity - 6.5 (Medium)
PyPI - OSV