PyPI/rembg: medium 4.3

rembg server is vulnerable to Server-Side Request Forgery (SSRF) and a weak default CORS configuration

Action: Upgrade rembg to 2.0.75 or later.

pip install rembg==2.0.75

Affected

Fixed versions

Sources

• osv: GHSA-55v6-g8pm-pw4c
• https://github.com/danielgatis/rembg/security/advisories/GHSA-55v6-g8pm-pw4c
• https://github.com/danielgatis/rembg/commit/07ad0d493057bddf821dcc3e2410eb7e065257c0
• https://github.com/danielgatis/rembg
• https://github.com/danielgatis/rembg/releases/tag/v2.0.75

published 2026-04-10T22:09:15Z · modified 2026-04-10T22:17:48.332110Z · JSON