Skip to content
OpenAdvisories

Package · npm

mojic

1 known vulnerabilities.

1 result · Feed

  • Medium 4.7

    Mojic: Observable Timing Discrepancy in HMAC Verification

    Mojic is a CLI tool to transform readable C code into an unrecognizable chaotic stream of emojis. Prior to 2.1.4, the CipherEngine uses a standard equality operator (!==) to verify the HMAC-SHA256 integrity seal during the decryption phase. This creates an Ob…