Search the public rule index by CVE, GHSA, CWE, language, framework, author, or rule slug. Filter by language, framework, severity, confidence, license, and validation status.
A short-circuiting logical operator `||` is used in a padding validation check, causing non-constant time execution. This makes the validation vulnerable to timing side-channel padding oracle attacks. Use a bitwise `|` to ensure both conditions are always evaluated.
Variable-time operations like division (`/`, `/=`, `%`, `%=`) or `step_by` were detected inside timing-sensitive lattice cryptographic algorithms. Hardware division executes in variable time depending on the data, creating timing side-channels that can leak authentication secrets or key material. Use constant-time division alternatives (such as Barrett reduc
