Threats affecting pkg:github/notamitgamer/mojic

Mojic versions prior to 2.1.4 contain a timing side-channel vulnerability in the CipherEngine's HMAC-SHA256 integrity verification. The use of a standard equality operator (! ==) during decryption causes an observable timing discrepancy (CWE-208), which could allow an attacker to bypass the file integrity check via timing analysis. This vulnerability has a medium severity rating and a CVSS score of 4.7. The issue is fixed in version 2.1.4.