QuantConnect/Lean

QuantConnect/Lean

GitHubGitHub
GitHubgithub.com
lean.iolean.io
Releases4.24K
Frequency23 hours 51 minutes
Last Release
Stars20.7K
Lean Algorithmic Trading Engine by QuantConnect (Python, C#)
Log in to subscribe

CVE History

CVEAffectedPublishedCVSS v3CVSS v2
CVE-2020-20136NVD↗
>= 2.3.0.0, <= 2.4.0.19.8 CRITICAL7.5 HIGH

QuantConnect Lean versions from 2.3.0.0 to 2.4.0.1 are affected by an insecure deserialization vulnerability due to insecure configuration of TypeNameHandling property in Json.NET library.