Lucene search
GoogleOSV:CVE-2020-20136HistoryDec 14, 2020 - 7:15 p.m.
CVE-2020-20136
2020-12-1419:15:12
Google
osv.dev
1
QuantConnect Lean versions from 2.3.0.0 to 2.4.0.1 are affected by an insecure deserialization vulnerability due to insecure configuration of TypeNameHandling property in Json.NET library.
References
Related
osv
osv
QuantConnect Lean vulnerable to insecure deserialization
2022-05-24 17:36:17
github
github
QuantConnect Lean vulnerable to insecure deserialization
2022-05-24 17:36:17
cve
cve
CVE-2020-20136
2020-12-14 19:15:12
cvelist
cvelist
CVE-2020-20136
2020-12-14 18:30:43
prion
prion
Deserialization of untrusted data
2020-12-14 19:15:00
nvd
nvd
CVE-2020-20136
2020-12-14 19:15:12