TI-2012-00062 CVE-2012-0063 · GHSA-6rc3-gvcg-6xchInsecure plugin update mechanism in tucan through 0.3.10 could allow remote attackers to…Priority MEDIUM 40Insecure plugin update mechanism in tucan through 0.3.10 could allow remote attackers to perform man-in-the-middle attacks and execute arbitrary code ith the permissions of the user running tucan.CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.02301 · Published 2020-02-21 · No fix listed