TI-2020-13772 CVE-2020-20136 · GHSA-ww7r-278h-48mhQuantConnect Lean versions from 2.3.0.0 to 2.4.0.1 are affected by an insecure…Priority MEDIUM 45QuantConnect Lean versions from 2.3.0.0 to 2.4.0.1 are affected by an insecure deserialization vulnerability due to insecure configuration of TypeNameHandling property in Json.NET library.CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01537 · Published 2020-12-14 · No fix listed CWE-502