critical9.8
CVE-2020-20136
QuantConnect Lean versions from 2.3.0.0 to 2.4.0.1 are affected by an insecure deserialization vulnerability due to insecure configuration of TypeNameHandling …
Impact
QuantConnect Lean versions from 2.3.0.0 to 2.4.0.1 are affected by an insecure deserialization vulnerability due to insecure configuration of TypeNameHandling property in Json.NET library.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Quantconnect | Lean | from 2.3.0.0 through 2.4.0.1 |