VYPR

rembg

by GitHub

CVEs (1)

  • CVE-2026-115924HigOct 26, 2026
    risk 0.56cvss 8.6epss —

    Rembg is a tool to remove images background. Prior to 2.0.82, the public /api/remove endpoint passes attacker-controlled extras.sam_model through rembg/commands/s_command.py to rembg/sessions/sam.py, where it is interpolated into SAM filenames and GitHub download URLs passed to…