rembg vulnerabilities (PyPI)

5 vulnerabilities.

• rembg PyPI Rembg: Unauthenticated SAM model injection permits local-file disclosure through malicious ONNX graphs CVE-2026-115924 Fix available 8.6 HighOctober 26, 2026
• rembg PyPI rembg server is vulnerable to Server-Side Request Forgery (SSRF) and a weak default CORS configuration GHSA-55v6-g8pm-pw4c Fix available 4.3 MediumApril 10, 2026
• rembg PyPI Rembg has a Path Traversal via Custom Model Loading CVE-2026-40086 Fix available 5.3 MediumApril 10, 2026
• rembg PyPI Rembg CORS misconfiguration CVE-2025-25302 Fix available 8.7 HighMarch 3, 2025
• rembg PyPI Rembg allows SSRF via /api/remove CVE-2025-25301 Fix available 6.9 MediumMarch 3, 2025