CyberSecBulletin

Danielgatis vulnerabilities

We track 2 vulnerabilities in Danielgatis products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 26, 2026.

2vulnerabilities
0critical
2high
0exploited
8.1average CVSS score

Latest Danielgatis vulnerabilities

  • 8.6 High severity

    rembg: Improper Limitation of a Pathname to a Restricted Directory

    CVE-2026-115924Danielgatis

    Rembg is a tool to remove images background. Prior to 2.0.82, the public /api/remove endpoint passes attacker-controlled extras.sam_model through rembg/commands/s_command.py to rembg/sessions/sam.py, where it is interpolated into SAM filenames and GitHub downl

  • 7.5 High severity

    rembg: Server-Side Request Forgery

    CVE-2025-25301Danielgatis

    Rembg is a tool to remove images background. In Rembg 2.0.57 and earlier, the /api/remove endpoint takes a URL query parameter that allows an image to be fetched, processed and returned. An attacker may be able to query this endpoint to view pictures hosted on