{"action":"Upgrade pyod to 3.6.2 or later.","affected":[{"fixed":"3.6.2","introduced":"3.5.0"}],"component":"pyod","cve_ids":["CVE-2026-15529"],"ecosystem":"PyPI","epss":0.00441,"exploited":false,"fixed_versions":["3.6.2"],"ghsa_id":"GHSA-997v-r4v7-9f3g","id":"tcs_01M5KH8H7ENZ9MV11S4YZGVW01","modified_at":"2026-09-10T12:15:12.709425429Z","published_at":"2026-09-10T09:44:50.448688Z","references":["https://osv.dev/vulnerability/PYSEC-2026-3909","https://nvd.nist.gov/vuln/detail/CVE-2026-15529","https://github.com/yzhao062/pyod/issues/697","https://github.com/yzhao062/pyod/pull/698","https://github.com/yzhao062/pyod/commit/16e6e3ad8921a4e18ccc8c2afe474db7d002c001","https://github.com/yzhao062/pyod","https://github.com/yzhao062/pyod/releases/tag/v3.6.2","https://pypi.org/project/pyod/3.6.2","https://vuldb.com/cve/CVE-2026-15529","https://vuldb.com/submit/854559","https://vuldb.com/vuln/377872","https://vuldb.com/vuln/377872/cti","https://pypi.org/project/pyod","https://github.com/advisories/GHSA-997v-r4v7-9f3g"],"severity":{"label":"medium","score":6.3},"sources":[{"source":"osv","source_id":"PYSEC-2026-3909","url":"https://osv.dev/vulnerability/PYSEC-2026-3909"}],"summary":"PyOD persistence.load deserializes untrusted artifacts before validation"}