~ / search / GHSA-r5gx-c49x-h878

GHSA-r5gx-c49x-h878

Rembg allows SSRF via /api/remove

Source: GitHub Advisory Database (reviewed) Moderate CVE-2025-25301

Packages

EcosystemPackageAffectedFixed in
PyPI rembg <= 2.0.57 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

Rembg is a tool to remove images background. In Rembg 2.0.57 and earlier, the /api/remove endpoint takes a URL query parameter that allows an image to be fetched, processed and returned. An attacker may be able to query this endpoint to view pictures hosted on the internal network of the rembg server. This issue may lead to Information Disclosure.

References

External links from the advisory. They lead to third-party sites.