description: Insecure plugin update mechanism in tucan through 0.3.10 could allow remote attackers to perform man-in-the-middle attacks and execute arbitrary code ith the permissions of the user running tucan.
problem types: insecure plugin update mechanism
affected:
{
product: tucan
vendor: tucan
versions:
status: affected, version: through 0.3.10
}