Staging Environment:
Content and features may be unstable or change without notice.
VulnerableCode
.
io
Documentation
Advisory To-Dos
Pipeline Dashboard
API
About
VulnerableCode is a free and open database of software package vulnerabilities.
Live chat at
https://gitter.im/aboutcode-org/vulnerablecode
Source code and support at
https://github.com/nexB/vulnerablecode
Docs at
https://vulnerablecode.readthedocs.org/
Sponsored by NLnet
https://nlnet.nl/project/vulnerabilitydatabase/
for
https://www.aboutcode.org/
v40.2.0
Extra Mitigation Curation
gitlab/nuget/QuantConnect.Common/CVE-2020-20136
Progress
0 / 0
Advisory Summary
gitlab/nuget/QuantConnect.Common/CVE-2020-20136
Deserialization of Untrusted Data QuantConnect Lean versions from 2.3.0.0 to 2.4.0.1 are affected by an insecure deserialization vulnerability due to insecure configuration of TypeNameHandling property in
Json.NET
library.
Show more
Mitigation Type
Mitigation Data
Mitigation Note
Previous Item
Next Item
Submit