Hi All,
A vulnerability in the Sparkle Updater Framework that can potentially be exploited via man-in-the-middle attacks has been disclosed.
I've been looking into it with a few folks on the MacAdmins Slack](macadmins.org) & with the help of @Banks (amongst others), I have written a [post on this issue & included within which is an Extension Attribute to help detect vulnerable applications.