Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2020-20136
9.8
CRITICALCVSS v3
Published
December 14, 2020
CVSS v2
7.5 HIGH
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
QuantConnect Lean versions from 2.3.0.0 to 2.4.0.1 are affected by an insecure deserialization vulnerability due to insecure configuration of TypeNameHandling property in Json.NET library.
QuantConnect/Lean
GitHubLean Algorithmic Trading Engine by QuantConnect (Python, C#)
GitHubLean Algorithmic Trading Engine by QuantConnect (Python, C#)>= 2.3.0.0, <= 2.4.0.1NVD