GET

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

GET /api/vulnerabilities/36981?format=api
HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36981?format=api",
    "vulnerability_id": "VCID-j4jv-uxp8-gqft",
    "summary": "Rembg is a tool to remove images background. In Rembg 2.0.57 and earlier, the CORS middleware is setup incorrectly. All origins are reflected, which allows any website to send cross site requests to the rembg server and thus query any API. Even if authentication were to be enabled, allow_credentials is set to True, which would allow any website to send authenticated cross site requests.",
    "aliases": [
        {
            "alias": "CVE-2025-25302"
        },
        {
            "alias": "PYSEC-2025-25"
        }
    ],
    "fixed_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/44474?format=api",
            "purl": "pkg:pypi/rembg@2.0.58",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rembg@2.0.58"
        }
    ],
    "affected_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/44445?format=api",
            "purl": "pkg:pypi/rembg@2.0.28",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-5491-113y-w7dm"
                },
                {
                    "vulnerability": "VCID-j4jv-uxp8-gqft"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rembg@2.0.28"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/44446?format=api",
            "purl": "pkg:pypi/rembg@2.0.29",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-5491-113y-w7dm"
                },
                {
                    "vulnerability": "VCID-j4jv-uxp8-gqft"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rembg@2.0.29"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/44447?format=api",
            "purl": "pkg:pypi/rembg@2.0.30",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-5491-113y-w7dm"
                },
                {
                    "vulnerability": "VCID-j4jv-uxp8-gqft"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rembg@2.0.30"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/44448?format=api",
            "purl": "pkg:pypi/rembg@2.0.31",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-5491-113y-w7dm"
                },
                {
                    "vulnerability": "VCID-j4jv-uxp8-gqft"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rembg@2.0.31"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/44449?format=api",
            "purl": "pkg:pypi/rembg@2.0.32",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-5491-113y-w7dm"
                },
                {
                    "vulnerability": "VCID-j4jv-uxp8-gqft"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rembg@2.0.32"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/44450?format=api",
            "purl": "pkg:pypi/rembg@2.0.33",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-5491-113y-w7dm"
                },
                {
                    "vulnerability": "VCID-j4jv-uxp8-gqft"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rembg@2.0.33"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/44451?format=api",
            "purl": "pkg:pypi/rembg@2.0.34",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-5491-113y-w7dm"
                },
                {
                    "vulnerability": "VCID-j4jv-uxp8-gqft"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rembg@2.0.34"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/44452?format=api",
            "purl": "pkg:pypi/rembg@2.0.35",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-5491-113y-w7dm"
                },
                {
                    "vulnerability": "VCID-j4jv-uxp8-gqft"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rembg@2.0.35"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/44453?format=api",
            "purl": "pkg:pypi/rembg@2.0.36",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-5491-113y-w7dm"
                },
                {
                    "vulnerability": "VCID-j4jv-uxp8-gqft"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rembg@2.0.36"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/44454?format=api",
            "purl": "pkg:pypi/rembg@2.0.37",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-5491-113y-w7dm"
                },
                {
                    "vulnerability": "VCID-j4jv-uxp8-gqft"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rembg@2.0.37"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/44455?format=api",
            "purl": "pkg:pypi/rembg@2.0.38",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-5491-113y-w7dm"
                },
                {
                    "vulnerability": "VCID-j4jv-uxp8-gqft"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rembg@2.0.38"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/44456?format=api",
            "purl": "pkg:pypi/rembg@2.0.39",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-5491-113y-w7dm"
                },
                {
                    "vulnerability": "VCID-j4jv-uxp8-gqft"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rembg@2.0.39"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/44457?format=api",
            "purl": "pkg:pypi/rembg@2.0.40",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-5491-113y-w7dm"
                },
                {
                    "vulnerability": "VCID-j4jv-uxp8-gqft"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rembg@2.0.40"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/44458?format=api",
            "purl": "pkg:pypi/rembg@2.0.41",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-5491-113y-w7dm"
                },
                {
                    "vulnerability": "VCID-j4jv-uxp8-gqft"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rembg@2.0.41"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/44459?format=api",
            "purl": "pkg:pypi/rembg@2.0.43",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-5491-113y-w7dm"
                },
                {
                    "vulnerability": "VCID-j4jv-uxp8-gqft"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rembg@2.0.43"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/44460?format=api",
            "purl": "pkg:pypi/rembg@2.0.44",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-5491-113y-w7dm"
                },
                {
                    "vulnerability": "VCID-j4jv-uxp8-gqft"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rembg@2.0.44"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/44461?format=api",
            "purl": "pkg:pypi/rembg@2.0.45",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-5491-113y-w7dm"
                },
                {
                    "vulnerability": "VCID-j4jv-uxp8-gqft"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rembg@2.0.45"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/44462?format=api",
            "purl": "pkg:pypi/rembg@2.0.46",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-5491-113y-w7dm"
                },
                {
                    "vulnerability": "VCID-j4jv-uxp8-gqft"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rembg@2.0.46"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/44463?format=api",
            "purl": "pkg:pypi/rembg@2.0.47",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-5491-113y-w7dm"
                },
                {
                    "vulnerability": "VCID-j4jv-uxp8-gqft"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rembg@2.0.47"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/44464?format=api",
            "purl": "pkg:pypi/rembg@2.0.48",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-5491-113y-w7dm"
                },
                {
                    "vulnerability": "VCID-j4jv-uxp8-gqft"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rembg@2.0.48"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/44465?format=api",
            "purl": "pkg:pypi/rembg@2.0.49",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-5491-113y-w7dm"
                },
                {
                    "vulnerability": "VCID-j4jv-uxp8-gqft"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rembg@2.0.49"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/44466?format=api",
            "purl": "pkg:pypi/rembg@2.0.50",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-5491-113y-w7dm"
                },
                {
                    "vulnerability": "VCID-j4jv-uxp8-gqft"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rembg@2.0.50"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/44467?format=api",
            "purl": "pkg:pypi/rembg@2.0.51",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-5491-113y-w7dm"
                },
                {
                    "vulnerability": "VCID-j4jv-uxp8-gqft"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rembg@2.0.51"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/44468?format=api",
            "purl": "pkg:pypi/rembg@2.0.52",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-5491-113y-w7dm"
                },
                {
                    "vulnerability": "VCID-j4jv-uxp8-gqft"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rembg@2.0.52"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/44469?format=api",
            "purl": "pkg:pypi/rembg@2.0.53",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-5491-113y-w7dm"
                },
                {
                    "vulnerability": "VCID-j4jv-uxp8-gqft"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rembg@2.0.53"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/44470?format=api",
            "purl": "pkg:pypi/rembg@2.0.54",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-5491-113y-w7dm"
                },
                {
                    "vulnerability": "VCID-j4jv-uxp8-gqft"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rembg@2.0.54"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/44471?format=api",
            "purl": "pkg:pypi/rembg@2.0.55",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-5491-113y-w7dm"
                },
                {
                    "vulnerability": "VCID-j4jv-uxp8-gqft"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rembg@2.0.55"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/44472?format=api",
            "purl": "pkg:pypi/rembg@2.0.56",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-5491-113y-w7dm"
                },
                {
                    "vulnerability": "VCID-j4jv-uxp8-gqft"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rembg@2.0.56"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/44473?format=api",
            "purl": "pkg:pypi/rembg@2.0.57",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-5491-113y-w7dm"
                },
                {
                    "vulnerability": "VCID-j4jv-uxp8-gqft"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rembg@2.0.57"
        }
    ],
    "references": [
        {
            "reference_url": "https://github.com/danielgatis/rembg/blob/d1e00734f8a996abf512a3a5c251c7a9a392c90a/rembg/commands/s_command.py#L93",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "6.5",
                    "scoring_system": "cvssv3.1",
                    "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N"
                }
            ],
            "url": "https://github.com/danielgatis/rembg/blob/d1e00734f8a996abf512a3a5c251c7a9a392c90a/rembg/commands/s_command.py#L93"
        },
        {
            "reference_url": "https://securitylab.github.com/advisories/GHSL-2024-161_GHSL-2024-162_rembg/",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "6.5",
                    "scoring_system": "cvssv3.1",
                    "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N"
                }
            ],
            "url": "https://securitylab.github.com/advisories/GHSL-2024-161_GHSL-2024-162_rembg/"
        }
    ],
    "weaknesses": [],
    "exploits": [],
    "severity_range_score": "6.5 - 6.5",
    "exploitability": null,
    "weighted_severity": null,
    "risk_score": null,
    "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-j4jv-uxp8-gqft"
}