Vulnerabilities

ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-55v6-g8pm-pw4c
  • PyPI/rembg
rembg server is vulnerable to Server-Side Request Forgery (SSRF) and a weak default CORS configuration 10 Apr
  • Fix available
  • Severity - 4.3 (Medium)
GHSA-3wqj-33cg-xc48
  • PyPI/rembg
Rembg has a Path Traversal via Custom Model Loading 10 Apr
  • Fix available
  • Severity - 5.3 (Medium)
GHSA-59qh-fmm7-3g9q
  • PyPI/rembg
Rembg CORS misconfiguration 11 Mar 2025
  • No fix available
  • Severity - 8.7 (High)
GHSA-r5gx-c49x-h878
  • PyPI/rembg
Rembg allows SSRF via /api/remove 11 Mar 2025
  • No fix available
  • Severity - 6.9 (Medium)
PYSEC-2025-24
  • PyPI/rembg
See record for full details 03 Mar 2025
  • Fix available
  • Severity - 7.5 (High)
PYSEC-2025-25
  • PyPI/rembg
See record for full details 03 Mar 2025
  • Fix available
  • Severity - 6.5 (Medium)