pyod

.. image:: https://raw.githubusercontent.com/yzhao062/pyod/master/brand/pyod-icon.svg :target: https://pyod.dev :alt: PyOD Ecosystem :width: 84px Python Outlier Detection PyOD 3 PyOD 3: Agentische Anomalieerkennung im großen Maßstab |badgewebsite| |badgepypi| |badgeanaconda| |badgedocs|...

PyOD persistence.load deserializes untrusted artifacts before validation

A vulnerability was detected in yzhao062 pyod 3.5.0/3.5.1/3.5.2. Affected is the function pyod.utils.persistence.load of the file pyod/utils/persistence.py. Performing a manipulation of the argument path results in deserialization. The attack can be initiated remotely. The pull request to fix thi...

PYSEC-2026-3909 PyOD persistence.load deserializes untrusted artifacts before validation

A vulnerability was detected in yzhao062 pyod 3.5.0/3.5.1/3.5.2. Affected is the function pyod.utils.persistence.load of the file pyod/utils/persistence.py. Performing a manipulation of the argument path results in deserialization. The attack can be initiated remotely. The pull request to fix thi...

pysad (>=0.5.0, <=0.6.0) potentially affected by CVE-2026-15529 via pyod (3.5.2)

pyod PYPI version 3.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on pyod and may be impacted: - pysad =0.5.0, =0.6.0 Source cves: CVE-2026-15529 Source advisory: OSV:PYSEC-2026-3909...

Deserialization of Untrusted Data

Overview pyod is an A Python library for anomaly detection across tabular, time series, graph, text, image, and audio data. 61 detectors, benchmark-backed ADEngine orchestration, and an agentic workflow for AI agents. Affected versions of this package are vulnerable to Deserialization of Untruste...

ailab-lite (>=0.1.1, <=0.1.14), autogluon-eda (>=0.7.0b20230414, <=0.8.3) +59 more potentially affected by CVE-2026-15529 via pyod (>=0.7.5, <=3.5.2)

pyod PYPI version =0.7.5, =0.1.1, =0.7.0b20230414, =0.1.0, =0.1.0, =0.3.0, =1.107.2rc3, =0.1.0a1, =0.0.2, =0.6.7, =0.5.0, =0.0.2, =0.1.4, =0.1.9 - final-code-203 0.1.0 and more Source cves: CVE-2026-15529 Source advisory: SNYK:PYTHON-PYOD-18017874...

GHSA-997V-R4V7-9F3G PyOD persistence.load deserializes untrusted artifacts before validation

A vulnerability was detected in yzhao062 pyod 3.5.0/3.5.1/3.5.2. Affected is the function pyod.utils.persistence.load of the file pyod/utils/persistence.py. Performing a manipulation of the argument path results in deserialization. The attack can be initiated remotely. The pull request to fix thi...

pysad (>=0.5.0, <=0.6.0) potentially affected by CVE-2026-15529 via pyod (3.5.2)

pyod PYPI version 3.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on pyod and may be impacted: - pysad =0.5.0, =0.6.0 Source cves: CVE-2026-15529 Source advisory: OSV:GHSA-997V-R4V7-9F3G...

pysad (>=0.5.0, <=0.6.0) potentially affected by CVE-2026-15529 via pyod (3.5.2)

pyod PYPI version 3.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on pyod and may be impacted: - pysad =0.5.0, =0.6.0 Source cves: CVE-2026-15529 Source advisory: GHSA-997V-R4V7-9F3G...

PyOD persistence.load deserializes untrusted artifacts before validation

A vulnerability was detected in yzhao062 pyod 3.5.0/3.5.1/3.5.2. Affected is the function pyod.utils.persistence.load of the file pyod/utils/persistence.py. Performing a manipulation of the argument path results in deserialization. The attack can be initiated remotely. The pull request to fix thi...

CVE-2026-15529

A vulnerability was detected in yzhao062 pyod up to 3.6.1. Affected is the function pyod.utils.persistence.load of the file pyod/utils/persistence.py. Performing a manipulation of the argument path results in deserialization. The attack can be initiated remotely. Upgrading to version 3.6.2 is abl...

CVE-2026-15529 yzhao062 pyod persistence.py pyod.utils.persistence.load deserialization

A vulnerability was detected in yzhao062 pyod up to 3.6.1. Affected is the function pyod.utils.persistence.load of the file pyod/utils/persistence.py. Performing a manipulation of the argument path results in deserialization. The attack can be initiated remotely. Upgrading to version 3.6.2 is abl...

EUVD-2026-43275

A vulnerability was detected in yzhao062 pyod 3.5.0/3.5.1/3.5.2. Affected is the function pyod.utils.persistence.load of the file pyod/utils/persistence.py. Performing a manipulation of the argument path results in deserialization. The attack can be initiated remotely. The pull request to fix thi...

CVE-2026-15529

A vulnerability was detected in yzhao062 pyod up to 3.6.1. Affected is the function pyod.utils.persistence.load of the file pyod/utils/persistence.py. Performing a manipulation of the argument path results in deserialization. The attack can be initiated remotely. Upgrading to version 3.6.2 is abl...

CVE-2026-15529

The vulnerability affects yzhao062 pyod versions 3.5.0, 3.5.1, and 3.5.2, specifically the function pyod.utils.persistence.load in pyod/utils/persistence.py. A path argument manipulation leads to deserialization, and the issue can be triggered remotely. The connected documents mention a pull requ...

CVE-2026-15529 yzhao062 pyod persistence.py pyod.utils.persistence.load deserialization

A vulnerability was detected in yzhao062 pyod up to 3.6.1. Affected is the function pyod.utils.persistence.load of the file pyod/utils/persistence.py. Performing a manipulation of the argument path results in deserialization. The attack can be initiated remotely. Upgrading to version 3.6.2 is abl...

pysad (>=0.5.0, <=0.6.0) potentially affected by CVE-2026-15529 via pyod (3.5.2)

pyod PYPI version 3.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on pyod and may be impacted: - pysad =0.5.0, =0.6.0 Source cves: CVE-2026-15529 Source advisory: MEND:CVE-2026-15529...

PT-2026-85346

A vulnerability was detected in yzhao062 pyod 3.5.0/3.5.1/3.5.2. Affected is the function pyod.utils.persistence.load of the file pyod/utils/persistence.py. Performing a manipulation of the argument path results in deserialization. The attack can be initiated remotely. The pull request to fix thi...

PT-2026-57616

Name of the Vulnerable Software and Affected Versions pyod versions 3.5.0 through 3.5.2 Description A deserialization flaw exists in the pyod.utils.persistence.load function within the pyod/utils/persistence.py file. The issue occurs because joblib.load is executed before any envelope validation,...

CVE-2026-15529: Deserialization of Untrusted Data

A vulnerability was detected in yzhao062 pyod 3.5.0/3.5.1/3.5.2. Affected is the function pyod.utils.persistence.load of the file pyod/utils/persistence.py. Performing a manipulation of the argument path results in deserialization. The attack can be initiated remotely. The pull request to fix thi...