VendorsQuantconnectleanall versions
Vulnerabilities

Quantconnect Lean

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

1CVEs
CVE-2020-20136
QuantConnect Lean versions from 2.3.0.0 to 2.4.0.1 are affected by an insecure deserialization vulnerability due to insecure configuration of TypeNameHandling property in Json.NET library.
Published 2020-12-14 · Modified
9.8EPSS 0.015