{"action":"Upgrade pyod to 3.6.2 or later.","affected":[{"fixed":"3.6.2","introduced":"3.5.0"}],"component":"pyod","cve_ids":["CVE-2026-15529"],"ecosystem":"PyPI","epss":0.00441,"exploited":false,"fixed_versions":["3.6.2"],"ghsa_id":"GHSA-997v-r4v7-9f3g","id":"tcs_01M5KFAB8NQWM3F5VGMQ9TWRV9","modified_at":"2026-09-10T12:25:43.512530610Z","published_at":"2026-07-13T06:31:31Z","references":["https://osv.dev/vulnerability/GHSA-997v-r4v7-9f3g","https://nvd.nist.gov/vuln/detail/CVE-2026-15529","https://github.com/yzhao062/pyod/issues/697","https://github.com/yzhao062/pyod/pull/698","https://github.com/yzhao062/pyod/commit/16e6e3ad8921a4e18ccc8c2afe474db7d002c001","https://github.com/yzhao062/pyod","https://github.com/yzhao062/pyod/releases/tag/v3.6.2","https://pypi.org/project/pyod/3.6.2","https://vuldb.com/cve/CVE-2026-15529","https://vuldb.com/submit/854559","https://vuldb.com/vuln/377872","https://vuldb.com/vuln/377872/cti"],"severity":{"label":"medium","score":6.3},"sources":[{"source":"osv","source_id":"GHSA-997v-r4v7-9f3g","url":"https://osv.dev/vulnerability/GHSA-997v-r4v7-9f3g"}],"summary":"PyOD persistence.load deserializes untrusted artifacts before validation"}