HIGH7.5PyPI
PYSEC-2025-24· CVE-2025-25301, GHSA-r5gx-c49x-h878Modified: 6/10/2026
package
PyPI/rembg
pkg:pypi/rembg
MEDIUM6.5PyPI
PYSEC-2025-25· CVE-2025-25302, GHSA-59qh-fmm7-3g9qModified: 6/10/2026
MEDIUM5.3PyPI
PYSEC-2026-2274· CVE-2026-40086, GHSA-3wqj-33cg-xc48Modified: 7/13/2026
MEDIUM5.3PyPI
GHSA-3wqj-33cg-xc48· CVE-2026-40086, PYSEC-2026-2274Rembg has a Path Traversal via Custom Model Loading
Modified: 7/13/2026
MEDIUM4.3PyPI
GHSA-55v6-g8pm-pw4crembg server is vulnerable to Server-Side Request Forgery (SSRF) and a weak default CORS configuration
Modified: 4/10/2026
HIGHPyPI
GHSA-59qh-fmm7-3g9q· CVE-2025-25302, PYSEC-2025-25Rembg CORS misconfiguration
Modified: 4/9/2025
HIGH7.5PyPI
GHSA-r5gx-c49x-h878· CVE-2025-25301, PYSEC-2025-24Rembg allows SSRF via /api/remove
Modified: 4/9/2025