Search vulnerabilities

Results 1

Export CSV
CVE-2020-20136

QuantConnect Lean versions from 2.3.0.0 to 2.4.0.1 are affected by an insecure deserialization vulnerability due to insecure configuration of TypeNameHandling property in Json.NET library.

CVSS 3.1 · 9.8 Critical EPSS 1.5% KEV · Not listed
Vendors
Products