Skip to content
OpenAdvisories

Package · NuGet

QuantConnect.Common

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.8
    CVE-2020-20136

    QuantConnect Lean vulnerable to insecure deserialization

    QuantConnect Lean versions from 2.3.0.0 to 2.4.0.1 are affected by an insecure deserialization vulnerability due to insecure configuration of TypeNameHandling property in Json.NET library.

    QuantConnect.Common NuGet