bigquery-mcp (>=0.1.1, <=0.1.3), codearkt (>=0.0.1, <=0.0.3) +8 more potentially affected by CVE-2025-64340 via fastmcp (2.11.2)

fastmcp PYPI version 2.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - bigquery-mcp =0.1.1, =0.0.1, =0.1.1, =0.2.5, =0.1.17, =0.1.0.3, =1.0.1, =0.2.2, =0.1.0, =2.1.22 Source cves: CVE-2025-64340 Source advisory:...

bigquery-mcp (>=0.1.1, <=0.1.3), codearkt (>=0.0.1, <=0.0.3) +8 more potentially affected by CVE-2026-27124 via fastmcp (2.11.2)

fastmcp PYPI version 2.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - bigquery-mcp =0.1.1, =0.0.1, =0.1.1, =0.2.5, =0.1.17, =0.1.0.3, =1.0.1, =0.2.2, =0.1.0, =2.1.22 Source cves: CVE-2026-27124 Source advisory:...

bigquery-mcp (>=0.1.1, <=0.1.3), codearkt (>=0.0.1, <=0.0.3) +8 more potentially affected by CVE-2026-32871 via fastmcp (2.11.2)

fastmcp PYPI version 2.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - bigquery-mcp =0.1.1, =0.0.1, =0.1.1, =0.2.5, =0.1.17, =0.1.0.3, =1.0.1, =0.2.2, =0.1.0, =2.1.22 Source cves: CVE-2026-32871 Source advisory:...

bigquery-mcp (>=0.1.1, <=0.1.3), codearkt (>=0.0.1, <=0.0.3) +8 more potentially affected by CVE-2025-64340 via fastmcp (2.11.2)

fastmcp PYPI version 2.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - bigquery-mcp =0.1.1, =0.0.1, =0.1.1, =0.2.5, =0.1.17, =0.1.0.3, =1.0.1, =0.2.2, =0.1.0, =2.1.22 Source cves: CVE-2025-64340 Source advisory:...

Insecure Deserialization

quantconnect.common is vulnerable to insecure deserialization. The vulnerability is due to insecure configuration of the TypeNameHandling property in the Json.NET library, which allows an attacker to exploit unsafe deserialization of crafted JSON payloads and potentially execute arbitrary code...

EUVD-2022-5652

Malicious code in bioql PyPI...

CVE-2020-20136

QuantConnect Lean versions from 2.3.0.0 to 2.4.0.1 are affected by an insecure deserialization vulnerability due to insecure configuration of TypeNameHandling property in Json.NET library...

QuantConnect Lean vulnerable to insecure deserialization

QuantConnect Lean versions from 2.3.0.0 to 2.4.0.1 are affected by an insecure deserialization vulnerability due to insecure configuration of TypeNameHandling property in Json.NET library. One may avoid this issue by only running Lean in an environment where data provided is trusted...

GHSA-WW7R-278H-48MH QuantConnect Lean vulnerable to insecure deserialization

QuantConnect Lean versions from 2.3.0.0 to 2.4.0.1 are affected by an insecure deserialization vulnerability due to insecure configuration of TypeNameHandling property in Json.NET library. One may avoid this issue by only running Lean in an environment where data provided is trusted...

QuantConnect Lean Code Issue Vulnerability

Quantconnect Lean is a cross-platform algorithmic trading engine for strategy research, backtesting and real-time trading based on the C language from Quantconnect. A security vulnerability exists in QuantConnect Lean versions 2.3.0.0 through 2.4.0.1, which stems from a failure to securely...

CVE-2020-20136

QuantConnect Lean versions from 2.3.0.0 to 2.4.0.1 are affected by an insecure deserialization vulnerability due to insecure configuration of TypeNameHandling property in Json.NET library...

CVE-2020-20136

QuantConnect Lean versions from 2.3.0.0 to 2.4.0.1 are affected by an insecure deserialization vulnerability due to insecure configuration of TypeNameHandling property in Json.NET library...

Deserialization of untrusted data

QuantConnect Lean versions from 2.3.0.0 to 2.4.0.1 are affected by an insecure deserialization vulnerability due to insecure configuration of TypeNameHandling property in Json.NET library...

CVE-2020-20136

QuantConnect Lean versions from 2.3.0.0 to 2.4.0.1 are affected by an insecure deserialization vulnerability due to insecure configuration of TypeNameHandling property in Json.NET library...

CVE-2020-20136

QuantConnect Lean versions from 2.3.0.0 to 2.4.0.1 are affected by an insecure deserialization vulnerability due to insecure configuration of TypeNameHandling property in Json.NET library...

CVE-2020-20136

CVE-2020-20136 affects QuantConnect Lean versions 2.3.0.0 through 2.4.0.1, due to an insecure deserialization vulnerability caused by insecure configuration of TypeNameHandling in Json.NET. The issue is documented across multiple sources (NVD entry, Red Hat advisory, GHSA, OSV) and has high/criti...

CVE-2020-20136: Deserialization of Untrusted Data

QuantConnect Lean versions from 2.3.0.0 to 2.4.0.1 are affected by an insecure deserialization vulnerability due to insecure configuration of TypeNameHandling property in Json.NET library...

QuantConnect Lean versions from code issues and vulnerabilities

Quantconnect Lean is a cross-platform algorithmic trading engine for strategy research, backtesting and real-time trading based on the C language from Quantconnect. A security vulnerability exists in QuantConnect Lean versions 2.3.0.0 through 2.4.0.1, which stems from a failure to securely...

PT-2020-15234

Name of the Vulnerable Software and Affected Versions QuantConnect Lean versions 2.3.0.0 through 2.4.0.1 Description The issue is related to an insecure deserialization vulnerability due to the insecure configuration of the TypeNameHandling property in the Json.NET library. This vulnerability can...