RE
Product
rembg
4
CVEs
0
On KEV
8.6
Max CVSS
1
New 30D
Severity mix
Critical 0High 2Medium 2Low 0
Watch
Add rembg to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-115924 New | 8.6 | Oct 26 | Rembg: Unauthenticated SAM model injection permits local-file disclosure through malicious ONNX graphs Affected: < 2.0.82 |
| CVE-2025-25301 | 7.5 | Mar 3 | Rembg allows SSRF via /api/remove Affected: <= 2.0.57 |
| CVE-2025-25302 | 6.5 | Mar 3 | Rembg CORS misconfiguration Affected: <= 2.0.57 |
| CVE-2026-40086 | 5.3 | Apr 10 | Rembg has a Path Traversal via Custom Model Loading Affected: < 2.0.75 |
Showing 4