GHSA-wqq3-wfmp-v85g
Medium · 4.7CVSS
4.7
EPSS
—
Published
Apr 16, 2026
CISA due date
—
The record
Mojic: Observable Timing Discrepancy in HMAC Verification
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| npm | mojic | 0 | 2.1.4 |
Related vulnerabilities
- CVE-2026-41244 Mojic is a CLI tool to transform readable C code into an unrecognizable chaotic stream of… Same vulnerability
- CVE-2026-87946 Observable Timing Discrepancy vulnerability in Drupal SAML SSO - Service Provider allows… CWE-208
- CVE-2026-49265 OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. CWE-208
- CVE-2026-77696 Issue summary: SM2 signature generation uses non-constant-time arithmetic on secret… CWE-208
- CVE-2026-54875 Issue summary: A non-constant-time optimized implementation of scalar point… CWE-208
- CVE-2026-54872 Issue summary: The generic elliptic-curve scalar multiplication used for ECDSA and SM2… CWE-208
- CVE-2026-87737 An issue was discovered in the mirage-crypto-ec package before 2.4.0 for OCaml. CWE-208
- CVE-2026-84308 phpseclib is a PHP secure communications library. CWE-208