{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"2.0.57"}],"component":"rembg","cve_ids":["CVE-2025-25302"],"ecosystem":"PyPI","epss":0.00195,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-59qh-fmm7-3g9q","id":"tcs_01M5KF0KW0RJJ3Q8GA63N1BYK0","modified_at":"2025-04-09T17:59:22.986651Z","published_at":"2025-03-11T21:32:43Z","references":["https://osv.dev/vulnerability/GHSA-59qh-fmm7-3g9q","https://nvd.nist.gov/vuln/detail/CVE-2025-25302","https://github.com/danielgatis/rembg","https://github.com/danielgatis/rembg/blob/d1e00734f8a996abf512a3a5c251c7a9a392c90a/rembg/commands/s_command.py#L93","https://securitylab.github.com/advisories/GHSL-2024-161_GHSL-2024-162_rembg"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-59qh-fmm7-3g9q","url":"https://osv.dev/vulnerability/GHSA-59qh-fmm7-3g9q"},{"source":"nvd","source_id":"CVE-2025-25302","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-25302"}],"summary":"Rembg CORS misconfiguration"}