Quantconnect: Security Vulnerabilities
QuantConnect Lean versions from 2.3.0.0 to 2.4.0.1 are affected by an insecure deserialization vulnerability due to insecure configuration of TypeNameHandling property in Json.NET library.
CVSS Score
9.8
EPSS Score
0.003
Published
2020-12-14