Non évaluée
QuantConnect Lean versions from 2.3.0.0 to 2.4.0.1 are affected by an insecure deserialization vulnerability due to insecure configuration of TypeName...
CVE-2020-20136
Première détection SecPulse
Description d'origine La description telle que publiée par la source (souvent en anglais).
QuantConnect Lean versions from 2.3.0.0 to 2.4.0.1 are affected by an insecure deserialization vulnerability due to insecure configuration of TypeNameHandling property in Json.NET library.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- report github.com