https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-30T10:29:21.056363+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-15529 CVE-2026-15529 — yzhao062 pyod persistence.py pyod.utils.persistence.load deserialization 2026-09-30T10:29:21.088219+00:00

Affected: yzhao062 pyod

A vulnerability was detected in yzhao062 pyod up to 3.6.1. Affected is the function pyod.utils.persistence.load of the file pyod/utils/persistence.py. Performing a manipulation of the argument path results in deserialization. The attack can be initiated remotely. Upgrading to version 3.6.2 is able to address this issue. It is recommended to apply a patch to fix this issue. The pull request to fix this issue requires some minor changes.

 https://vulnerability.circl.lu/vuln/pysec-2026-3909 PYSEC-2026-3909 — PyOD persistence.load deserializes untrusted artifacts before validation 2026-09-30T10:29:21.088327+00:00

Affected: PyPI: pyod

A vulnerability was detected in yzhao062 pyod 3.5.0/3.5.1/3.5.2. Affected is the function pyod.utils.persistence.load of the file pyod/utils/persistence.py. Performing a manipulation of the argument path results in deserialization. The attack can be initiated remotely. The pull request to fix this issue requires some minor changes.