Search the public rule index by CVE, GHSA, CWE, language, framework, author, or rule slug. Filter by language, framework, severity, confidence, license, and validation status.
Raising a validation error when an account already exists can lead to user enumeration attacks. An attacker can probe endpoints to discover registered accounts. Avoid returning distinct errors for existing accounts; instead, process the request opaquely and handle notifications out-of-band. (Note: Token-authenticated confirmation endpoints are excluded as th
The constant-time "is non-zero" bitwise idiom `(x | x.wrapping_neg()) >> N` produces a boolean-shaped (0 or 1) result. Without a `core::hint::black_box()` optimization barrier wrapping this expression itself, LLVM may rewrite downstream mask arithmetic into a conditional branch on targets without a conditional-move instruction (notably `thumbv6m-none-eabi` /
Variable-time operations like division (`/`, `/=`, `%`, `%=`) or `step_by` were detected inside timing-sensitive lattice cryptographic algorithms. Hardware division executes in variable time depending on the data, creating timing side-channels that can leak authentication secrets or key material. Use constant-time division alternatives (such as Barrett reduc
