{"id":"EUVD-2026-25610","enisaUuid":"85b47207-2920-32c2-9c71-9fab196d2f55","description":"Mojic is a CLI tool to transform readable C code into an unrecognizable chaotic stream of emojis. Prior to 2.1.4, the CipherEngine uses a standard equality operator (!\u003d\u003d) to verify the HMAC-SHA256 integrity seal during the decryption phase. This creates an Observable Timing Discrepancy (CWE-208), allowing a potential attacker to bypass the file integrity check via a timing attack. This vulnerability is fixed in 2.1.4.","datePublished":"Apr 24, 2026, 7:11:54 PM","dateUpdated":"Apr 24, 2026, 7:59:59 PM","baseScore":4.7,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","references":"https://github.com/notamitgamer/mojic/security/advisories/GHSA-wqq3-wfmp-v85g\n","aliases":"CVE-2026-41244\n","assigner":"GitHub_M","epss":0.11,"enisaIdProduct":[{"id":"0077bc70-2e02-342c-bab0-19b0923f4a41","product":{"name":"mojic","vendor":{"name":"notamitgamer"}},"product_version":"\u003c 2.1.4"}],"enisaIdVendor":[{"id":"5bc41a6c-31ec-3351-86ba-73766fc9ac04","vendor":{"name":"notamitgamer"}}],"enisaIdVulnerability":[{"id":"8292ed72-20bc-3781-b397-e7bbd94b1d42","vulnerability":{"id":"CVE-2026-41244","description":"Mojic is a CLI tool to transform readable C code into an unrecognizable chaotic stream of emojis. Prior to 2.1.4, the CipherEngine uses a standard equality operator (!\u003d\u003d) to verify the HMAC-SHA256 integrity seal during the decryption phase. This creates an Observable Timing Discrepancy (CWE-208), allowing a potential attacker to bypass the file integrity check via a timing attack. This vulnerability is fixed in 2.1.4.","datePublished":"Apr 24, 2026, 7:11:54 PM","dateUpdated":"Apr 24, 2026, 7:59:59 PM","status":"PUBLISHED","baseScore":4.7,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","references":"https://github.com/notamitgamer/mojic/security/advisories/GHSA-wqq3-wfmp-v85g\n","enisa_id":"EUVD-2026-25610\n","assigner":"GitHub_M","epss":0.11,"dataProcessed":"Oct 27, 2026, 7:17:29 AM","vulnerabilityProduct":[{"id":"02186d9a-9201-3de1-ab6b-2e2491eb08d9","product":{"name":"mojic","vendor":{"name":"notamitgamer"}},"product_version":"\u003c 2.1.4"}],"vulnerabilityVendor":[{"id":"90afb6d0-13e9-3a80-bbb2-27ea2b7aa530","vendor":{"name":"notamitgamer"}}]}}],"enisaIdAdvisory":[]}