Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-29427 State: PUBLISHED Published: 2021-04-13T17:55:24 Last Updated: 2024-08-03T22:02:51.882Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: gradle Products: gradle Problem Types: CWE-829 Description: In Gradle from version 5.1 and before version 7.0 there is a vulnerability which can lead to information disclosure and/or dependency poisoning. Repository content filtering is a security control Gradle introduced to help users specify what repositories are used to resolve specific dependencies. This feature was introduced in the wake of the "A Confusing Dependency" blog post. In some cases, Gradle may ignore content filters and search all reposito
wake of the "A Confusing Dependency" blog post. In some cases, Gradle may ignore content filters and search all repositories for dependencies. This only occurs when repository content filtering is used from within a `pluginManagement` block in a settings file. This may change how dependencies are resolved for Gradle plugins and build scripts. For builds that are vulnerable, there are two risks: 1) Information disclosure: Gradle could make dependency requests to repositories outside your organization and leak internal package identifiers. 2) Dependency poisoning/Dependency confusion: Gradle could download a malicious binary from a repository outside your organization due to name squatting. Fo
onfusion: Gradle could download a malicious binary from a repository outside your organization due to name squatting. For a full example and more details refer to the referenced GitHub Security Advisory. The problem has been patched and released with Gradle 7.0. Users relying on this feature should upgrade their build as soon as possible. As a workaround, users may use a company repository which has the right rules for fetching packages from public repositories, or use project level repository content filtering, inside `buildscript.repositories`. This option is available since Gradle 5.1 when the feature was introduced. Additional Analyst Notes: - CVE Program Container: References: - https:/
nce Gradle 5.1 when the feature was introduced. Additional Analyst Notes: - CVE Program Container: References: - https://docs.gradle.org/7.0/release-notes.html#security-advisories - https://github.com/gradle/gradle/security/advisories/GHSA-jvmj-rh6q-x395
CVE ID: CVE-2021-29428 State: PUBLISHED Published: 2021-04-13T17:55:18 Last Updated: 2024-08-03T22:02:51.887Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: gradle Products: gradle Problem Types: CWE-379, CWE-378 Description: In Gradle before version 7.0, on Unix-like systems, the system temporary directory can be created with open permissions that allow multiple users to create and delete files within it. Gradle builds could be vulnerable to a local privilege escalation from an attacker quickly deleting and recreating files in the system temporary directory. This vulnerability impacted builds using precompiled script plugins written in Kotlin DSL and tests f
mporary directory. This vulnerability impacted builds using precompiled script plugins written in Kotlin DSL and tests for Gradle plugins written using ProjectBuilder or TestKit. If you are on Windows or modern versions of macOS, you are not vulnerable. If you are on a Unix-like operating system with the "sticky" bit set on your system temporary directory, you are not vulnerable. The problem has been patched and released with Gradle 7.0. As a workaround, on Unix-like operating systems, ensure that the "sticky" bit is set. This only allows the original user (or root) to delete a file. If you are unable to change the permissions of the system temporary directory, you can move the Java temporar
te a file. If you are unable to change the permissions of the system temporary directory, you can move the Java temporary directory by setting the System Property `java.io.tmpdir`. The new path needs to limit permissions to the build user only. For additional details refer to the referenced GitHub Security Advisory. Additional Analyst Notes: - CVE Program Container: References: - https://docs.gradle.org/7.0/release-notes.html#security-advisories - https://github.com/gradle/gradle/security/advisories/GHSA-89qm-pxvm-p336 - https://github.com/gradle/gradle/pull/15654 - https://github.com/gradle/gradle/pull/15240
CVE ID: CVE-2021-29429 State: PUBLISHED Published: 2021-04-12T21:30:12 Last Updated: 2024-08-03T22:02:51.929Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: gradle Products: gradle Problem Types: CWE-377 Description: In Gradle before version 7.0, files created with open permissions in the system temporary directory can allow an attacker to access information downloaded by Gradle. Some builds could be vulnerable to a local information disclosure. Remote files accessed through TextResourceFactory are downloaded into the system temporary directory first. Sensitive information contained in these files can be exposed to other local users on the same system. If you
ory first. Sensitive information contained in these files can be exposed to other local users on the same system. If you do not use the `TextResourceFactory` API, you are not vulnerable. As of Gradle 7.0, uses of the system temporary directory have been moved to the Gradle User Home directory. By default, this directory is restricted to the user running the build. As a workaround, set a more restrictive umask that removes read access to other users. When files are created in the system temporary directory, they will not be accessible to other users. If you are unable to change your system's umask, you can move the Java temporary directory by setting the System Property `java.io.tmpdir`. The
nge your system's umask, you can move the Java temporary directory by setting the System Property `java.io.tmpdir`. The new path needs to limit permissions to the build user only. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/gradle/gradle/security/advisories/GHSA-fp8h-qmr5-j4c8 - https://docs.gradle.org/7.0/release-notes.html#security-advisories
CVE ID: CVE-2021-29430 State: PUBLISHED Published: 2021-04-15T20:35:19 Last Updated: 2024-08-03T22:02:51.883Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: matrix-org Products: sydent Problem Types: CWE-20, CWE-400 Description: Sydent is a reference Matrix identity server. Sydent does not limit the size of requests it receives from HTTP clients. A malicious user could send an HTTP request with a very large body, leading to memory exhaustion and denial of service. Sydent also does not limit response size for requests it makes to remote Matrix homeservers. A malicious homeserver could return a very large response, again leading to memory exhaustion and denial
x homeservers. A malicious homeserver could return a very large response, again leading to memory exhaustion and denial of service. This affects any server which accepts registration requests from untrusted clients. This issue has been patched by releases 89071a1, 0523511, f56eee3. As a workaround request sizes can be limited in an HTTP reverse-proxy. There are no known workarounds for the problem with overlarge responses. Additional Analyst Notes: - CVE Program Container: References: - https://pypi.org/project/matrix-sydent/ - https://github.com/matrix-org/sydent/security/advisories/GHSA-wmg4-8cp2-hpg9 - https://github.com/matrix-org/sydent/commit/89071a1a754c69a50deac89e6bb74002d4cda19d -
advisories/GHSA-wmg4-8cp2-hpg9 - https://github.com/matrix-org/sydent/commit/89071a1a754c69a50deac89e6bb74002d4cda19d - https://github.com/matrix-org/sydent/commit/0523511d2fb40f2738f8a8549868f44b96e5dab7 - https://github.com/matrix-org/sydent/commit/f56eee315b6c44fdd9f6aa785cc2ec744a594428 - https://github.com/matrix-org/sydent/releases/tag/v2.3.0
CVE ID: CVE-2021-29431 State: PUBLISHED Published: 2021-04-15T21:00:16 Last Updated: 2024-08-03T22:02:51.856Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: matrix-org Products: sydent Problem Types: CWE-20, CWE-918 Description: Sydent is a reference Matrix identity server. Sydent can be induced to send HTTP GET requests to internal systems, due to lack of parameter validation or IP address blacklisting. It is not possible to exfiltrate data or control request headers, but it might be possible to use the attack to perform an internal port enumeration. This issue has been addressed in in 9e57334, 8936925, 3d531ed, 0f00412. A potential workaround would be to us
umeration. This issue has been addressed in in 9e57334, 8936925, 3d531ed, 0f00412. A potential workaround would be to use a firewall to ensure that Sydent cannot reach internal HTTP resources. Additional Analyst Notes: - CVE Program Container: References: - https://pypi.org/project/matrix-sydent/ - https://github.com/matrix-org/sydent/releases/tag/v2.3.0 - https://github.com/matrix-org/sydent/security/advisories/GHSA-9jhm-8m8c-c3f4 - https://github.com/matrix-org/sydent/commit/9e573348d81df8191bbe8c266c01999c9d57cd5f - https://github.com/matrix-org/sydent/commit/8936925f561b0c352c2fa922d5097d7245aad00a - https://github.com/matrix-org/sydent/commit/3d531ed50d2fd41ac387f36d44d3fb2c62dd22d3 - h
b0c352c2fa922d5097d7245aad00a - https://github.com/matrix-org/sydent/commit/3d531ed50d2fd41ac387f36d44d3fb2c62dd22d3 - https://github.com/matrix-org/sydent/commit/0f00412017f25619bc36c264b29ea96808bf310a
CVE ID: CVE-2021-29432 State: PUBLISHED Published: 2021-04-15T20:45:15 Last Updated: 2024-08-03T22:02:51.936Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: matrix-org Products: sydent Problem Types: CWE-20 Description: Sydent is a reference matrix identity server. A malicious user could abuse Sydent to send out arbitrary emails from the Sydent email address. This could be used to construct plausible phishing emails, for example. This issue has been fixed in 4469d1d. Additional Analyst Notes: - CVE Program Container: References: - https://pypi.org/project/matrix-sydent/ - https://github.com/matrix-org/sydent/releases/tag/v2.3.0 - https://github.com/matrix-o
pypi.org/project/matrix-sydent/ - https://github.com/matrix-org/sydent/releases/tag/v2.3.0 - https://github.com/matrix-org/sydent/security/advisories/GHSA-mh74-4m5g-fcjx - https://github.com/matrix-org/sydent/commit/4469d1d42b2b1612b70638224c07e19623039c42
CVE ID: CVE-2021-29433 State: PUBLISHED Published: 2021-04-15T17:55:11 Last Updated: 2024-08-03T22:02:51.915Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: matrix-org Products: sydent Problem Types: CWE-20 Description: Sydent is a reference Matrix identity server. In Sydent versions 2.2.0 and prior, sissing input validation of some parameters on the endpoints used to confirm third-party identifiers could cause excessive use of disk space and memory leading to resource exhaustion. A patch for the vulnerability is in version 2.3.0. No workarounds are known to exist. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/matrix-or
rounds are known to exist. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/matrix-org/sydent/security/advisories/GHSA-pw4v-gr34-2553 - https://github.com/matrix-org/sydent/commit/3175fd358ebc2c310eab7a3dbf296ce2bd54c1da
CVE ID: CVE-2021-29434 State: PUBLISHED Published: 2021-04-19T18:45:14 Last Updated: 2024-08-03T22:02:51.911Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N) Vendors: wagtail Products: wagtail Problem Types: CWE-79 Description: Wagtail is a Django content management system. In affected versions of Wagtail, when saving the contents of a rich text field in the admin interface, Wagtail does not apply server-side checks to ensure that link URLs use a valid protocol. A malicious user with access to the admin interface could thus craft a POST request to publish content with `javascript:` URLs containing arbitrary code. The vulnerability is not exploitable by an ordinary si
ublish content with `javascript:` URLs containing arbitrary code. The vulnerability is not exploitable by an ordinary site visitor without access to the Wagtail admin. See referenced GitHub advisory for additional details, including a workaround. Patched versions have been released as Wagtail 2.11.7 (for the LTS 2.11 branch) and Wagtail 2.12.4 (for the current 2.12 branch). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/wagtail/wagtail/security/advisories/GHSA-wq5h-f9p5-q7fx - https://pypi.org/project/wagtail/
CVE ID: CVE-2021-29435 State: PUBLISHED Published: 2021-04-13T17:00:21 Last Updated: 2024-08-03T22:02:51.930Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N) Vendors: TrestleAdmin Products: trestle-auth Problem Types: CWE-352 Description: trestle-auth is an authentication plugin for the Trestle admin framework. A vulnerability in trestle-auth versions 0.4.0 and 0.4.1 allows an attacker to create a form that will bypass Rails' built-in CSRF protection when submitted by a victim with a trestle-auth admin session. This potentially allows an attacker to alter protected data, including admin account credentials. The vulnerability has been fixed in trestle-auth 0.4.2 release
lter protected data, including admin account credentials. The vulnerability has been fixed in trestle-auth 0.4.2 released to RubyGems. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/TrestleAdmin/trestle-auth/security/advisories/GHSA-h8hx-2c5r-32cf - https://github.com/TrestleAdmin/trestle-auth/commit/cb95b05cdb2609052207af07b4b8dfe3a23c11dc - https://rubygems.org/gems/trestle-auth
CVE ID: CVE-2021-29436 State: PUBLISHED Published: 2021-04-13T17:20:14 Last Updated: 2024-08-03T22:02:51.962Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: anuko Products: timetracker Problem Types: CWE-352 Description: Anuko Time Tracker is an open source, web-based time tracking application written in PHP. In Time Tracker before version 1.19.27.5431 a Cross site request forgery (CSRF) vulnerability existed. The nature of CSRF is that a logged on user may be tricked by social engineering to click on an attacker-provided form that executes an unintended action such as changing user password. The vulnerability is fixed in Time Tracker version 1.19.27.5431.
s an unintended action such as changing user password. The vulnerability is fixed in Time Tracker version 1.19.27.5431. Upgrade is recommended. If upgrade is not practical, introduce ttMitigateCSRF() function in /WEB-INF/lib/common.php.lib using the latest available code and call it from ttAccessAllowed(). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/anuko/timetracker/security/advisories/GHSA-pgpx-rfvj-9g4f - https://github.com/anuko/timetracker/commit/e3f8222ee308322942bcebcd86b78ecf19382563 - https://github.com/anuko/timetracker/commit/e77be7eea69df5d52e19f9f25b5b89a0e66a5b8e
CVE ID: CVE-2021-29437 State: PUBLISHED Published: 2021-04-13T18:25:20 Last Updated: 2024-08-03T22:02:51.925Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N) Vendors: ScratchVerifier Products: ScratchOAuth2 Problem Types: CWE-863 Description: ScratchOAuth2 is an Oauth implementation for Scratch. Any ScratchOAuth2-related data normally accessible and modifiable by a user can be read and modified by a third party. 1. Scratch user visits 3rd party site. 2. 3rd party site asks user for Scratch username. 3. 3rd party site pretends to be user and gets login code from ScratchOAuth2. 4. 3rd party site gives code to user and instructs them to post it on their profile. 5. User pos
ode from ScratchOAuth2. 4. 3rd party site gives code to user and instructs them to post it on their profile. 5. User posts code on their profile, not knowing it is a ScratchOAuth2 login code. 6. 3rd party site completes login with ScratchOAuth2. 7. 3rd party site has full access to anything the user could do if they directly logged in. See referenced GitHub security advisory for patch notes and workarounds. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ScratchVerifier/ScratchOAuth2/security/advisories/GHSA-gvpg-23fh-8g75 - https://github.com/ScratchVerifier/ScratchOAuth2/commit/9220c2a77eda3df37a84486ad722f1ad0985d8e7
CVE ID: CVE-2021-29438 State: PUBLISHED Published: 2021-04-13T18:40:15 Last Updated: 2024-08-03T22:02:51.929Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N) Vendors: nextcloud Products: nextcloud-dialogs Problem Types: CWE-79, CWE-80 Description: The Nextcloud dialogs library (npm package @nextcloud/dialogs) before 3.1.2 insufficiently escaped text input passed to a toast. If your application displays toasts with user-supplied input, this could lead to a XSS vulnerability. The vulnerability has been patched in version 3.1.2 If you need to display HTML in the toast, explicitly pass the `options.isHTML` config flag. Additional Analyst Notes: - CVE Program Container: R
TML in the toast, explicitly pass the `options.isHTML` config flag. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nextcloud/nextcloud-dialogs/security/advisories/GHSA-g3fq-3v3g-mh32 - https://www.npmjs.com/package/%40nextcloud/dialogs
CVE ID: CVE-2021-29439 State: PUBLISHED Published: 2021-04-13T19:45:15 Last Updated: 2024-08-03T22:02:51.967Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: getgrav Products: grav-plugin-admin Problem Types: CWE-863 Description: The Grav admin plugin prior to version 1.10.11 does not correctly verify caller's privileges. As a consequence, users with the permission `admin.login` can install third-party plugins and their dependencies. By installing the right plugin, an attacker can obtain an arbitrary code execution primitive and elevate their privileges on the instance. The vulnerability has been addressed in version 1.10.11. As a mitigation blocking access to
privileges on the instance. The vulnerability has been addressed in version 1.10.11. As a mitigation blocking access to the `/admin` path from untrusted sources will reduce the probability of exploitation. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/getgrav/grav-plugin-admin/security/advisories/GHSA-wg37-cf5x-55hq - https://github.com/getgrav/grav-plugin-admin/commit/a220359877fd1281f76ba732e5308e0e3002e4b1
CVE ID: CVE-2021-29440 State: PUBLISHED Published: 2021-04-13T19:55:13 Last Updated: 2024-08-03T22:02:51.882Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H) Vendors: getgrav Products: grav Problem Types: CWE-94 Description: Grav is a file based Web-platform. Twig processing of static pages can be enabled in the front matter by any administrative user allowed to create or edit pages. As the Twig processor runs unsandboxed, this behavior can be used to gain arbitrary code execution and elevate privileges on the instance. The issue was addressed in version 1.7.11. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/getgrav/grav/security/ad
ion 1.7.11. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/getgrav/grav/security/advisories/GHSA-g8r4-p96j-xfxc - https://packagist.org/packages/getgrav/grav - http://packetstormsecurity.com/files/162987/Grav-CMS-1.7.10-Server-Side-Template-Injection.html - https://blog.sonarsource.com/grav-cms-code-execution-vulnerabilities
CVE ID: CVE-2021-29441 State: PUBLISHED Published: 2021-04-27T20:20:20 Last Updated: 2024-08-03T22:02:51.975Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N) Vendors: alibaba Products: nacos Problem Types: CWE-290 Description: Nacos is a platform designed for dynamic service discovery and configuration and service management. In Nacos before version 1.4.1, when configured to use authentication (-Dnacos.core.auth.enabled=true) Nacos uses the AuthFilter servlet filter to enforce authentication. This filter has a backdoor that enables Nacos servers to bypass this filter and therefore skip authentication checks. This mechanism relies on the user-agent HTTP header so it can
pass this filter and therefore skip authentication checks. This mechanism relies on the user-agent HTTP header so it can be easily spoofed. This issue may allow any user to carry out any administrative tasks on the Nacos server. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/alibaba/nacos/issues/4701 - https://github.com/advisories/GHSA-36hp-jr8h-556f - https://github.com/alibaba/nacos/pull/4703
CVE ID: CVE-2021-29442 State: PUBLISHED Published: 2021-04-27T20:20:13 Last Updated: 2024-08-03T22:02:51.966Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N) Vendors: alibaba Products: nacos Problem Types: CWE-306 Description: Nacos is a platform designed for dynamic service discovery and configuration and service management. In Nacos before version 1.4.1, the ConfigOpsController lets the user perform management operations like querying the database or even wiping it out. While the /data/remove endpoint is properly protected with the @Secured annotation, the /derby endpoint is not protected and can be openly accessed by unauthenticated users. These endpoints are only v
on, the /derby endpoint is not protected and can be openly accessed by unauthenticated users. These endpoints are only valid when using embedded storage (derby DB) so this issue should not affect those installations using external storage (e.g. mysql) Additional Analyst Notes: - CVE Program Container: References: - https://github.com/alibaba/nacos/issues/4463 - https://github.com/advisories/GHSA-36hp-jr8h-556f - https://github.com/alibaba/nacos/pull/4517
CVE ID: CVE-2021-29443 State: PUBLISHED Published: 2021-04-16T17:35:12 Last Updated: 2024-08-03T22:02:52.017Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: panva Products: jose Problem Types: CWE-203 Description: jose is an npm library providing a number of cryptographic operations. In vulnerable versions AES_CBC_HMAC_SHA2 Algorithm (A128CBC-HS256, A192CBC-HS384, A256CBC-HS512) decryption would always execute both HMAC tag verification and CBC decryption, if either failed `JWEDecryptionFailed` would be thrown. A possibly observable difference in timing when padding error would occur while decrypting the ciphertext makes a padding oracle and an adversary mi
ence in timing when padding error would occur while decrypting the ciphertext makes a padding oracle and an adversary might be able to make use of that oracle to decrypt data without knowing the decryption key by issuing on average 128*b calls to the padding oracle (where b is the number of bytes in the ciphertext block). All major release versions have had a patch released which ensures the HMAC tag is verified before performing CBC decryption. The fixed versions are `^1.28.1 || ^2.0.5 || >=3.11.4`. Users should upgrade their v1.x dependency to ^1.28.1, their v2.x dependency to ^2.0.5, and their v3.x dependency to ^3.11.4. Thanks to Jason from Microsoft Vulnerability Research (MSVR) for bri
cy to ^2.0.5, and their v3.x dependency to ^3.11.4. Thanks to Jason from Microsoft Vulnerability Research (MSVR) for bringing this up and Eva Sarafianou (@esarafianou) for helping to score this advisory. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/panva/jose/security/advisories/GHSA-58f5-hfqc-jgch - https://www.npmjs.com/package/jose
CVE ID: CVE-2021-29444 State: PUBLISHED Published: 2021-04-16T21:45:16 Last Updated: 2024-08-03T22:02:51.935Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: panva Products: jose Problem Types: CWE-203 Description: jose-browser-runtime is an npm package which provides a number of cryptographic functions. In versions prior to 3.11.4 the AES_CBC_HMAC_SHA2 Algorithm (A128CBC-HS256, A192CBC-HS384, A256CBC-HS512) decryption would always execute both HMAC tag verification and CBC decryption, if either failed `JWEDecryptionFailed` would be thrown. But a possibly observable difference in timing when padding error would occur while decrypting the ciphertext makes a p