time
Date and time handling in Rust.
View on Github
Activity
- Latest release
- 1mo ago
- Total releases
- 135
- Cadence
- ~15 days
- Last 12 months
- 11
Reach
- Downloads
- 799.4M
- Stars
- 1.3k
Details
- License
- MIT OR Apache-2.0
- First release
- Nov 13, 2014
| Version | Released | |
|---|---|---|
0.3.55
patch
|
0.3.55
patch
Dependencies (22)
+ 14 more
Changelog
Compare changes
|
|
0.3.54
patch
|
0.3.54
patch
Dependencies (22)
+ 14 more
Changelog
Compare changes
|
|
0.3.53
patch
|
0.3.53
patch
Dependencies (22)
+ 14 more
Changelog
Compare changes
|
|
0.3.52
patch
|
0.3.52
patch
Dependencies (22)
+ 14 more
Changelog
Compare changes
|
|
0.3.51
patch
|
0.3.51
patch
Dependencies (22)
+ 14 more
Changelog
Compare changes
|
|
0.3.50
patch
yanked
|
0.3.50
patch
yanked
Dependencies (22)
+ 14 more
Changelog
Compare changes
|
|
0.3.49
patch
|
0.3.49
patch
Dependencies (22)
+ 14 more
Changelog
Compare changes
|
|
0.3.48
patch
yanked
|
0.3.48
patch
yanked
Dependencies (22)
+ 14 more
Changelog
Compare changes
|
|
0.3.47
patch
|
0.3.47
patch
Dependencies (23)
+ 15 more
Changelog
Compare changes
|
|
0.3.46
patch
1 CVE
CVE-2026-25727
GHSA-r6v5-fh4h-64xc
RUSTSEC-2026-0009
Feb 05, 2026
time vulnerable to stack exhaustion Denial of Service attack
Medium
Network
High
Low
ImpactWhen user-provided input is provided to any type that parses with the RFC 2822 format, a denial of service attack via stack exhaustion is possible. The attack relies on formally deprecated and rarely-used features that are part of the RFC 2822 format used in a malicious manner. Ordinary, non-malicious input will never encounter this scenario. PatchesA limit to the depth of recursion was added in v0.3.47. From this version, an error will be returned rather than exhausting the stack. WorkaroundsLimiting the length of user input is the simplest way to avoid stack exhaustion, as the amount of the stack consumed would be at most a factor of the length of the input. Alternatively, avoiding the format altogether would also ensure that the vulnerability is not encountered. To do this, add to your Fixed in
0.3.47
References
Updated Sep 10, 2026 · Source: OSV.dev |
0.3.46
patch
Dependencies (23)
+ 15 more
Changelog
Compare changes
|
|
0.3.45
patch
1 CVE
CVE-2026-25727
GHSA-r6v5-fh4h-64xc
RUSTSEC-2026-0009
Feb 05, 2026
time vulnerable to stack exhaustion Denial of Service attack
Medium
Network
High
Low
ImpactWhen user-provided input is provided to any type that parses with the RFC 2822 format, a denial of service attack via stack exhaustion is possible. The attack relies on formally deprecated and rarely-used features that are part of the RFC 2822 format used in a malicious manner. Ordinary, non-malicious input will never encounter this scenario. PatchesA limit to the depth of recursion was added in v0.3.47. From this version, an error will be returned rather than exhausting the stack. WorkaroundsLimiting the length of user input is the simplest way to avoid stack exhaustion, as the amount of the stack consumed would be at most a factor of the length of the input. Alternatively, avoiding the format altogether would also ensure that the vulnerability is not encountered. To do this, add to your Fixed in
0.3.47
References
Updated Sep 10, 2026 · Source: OSV.dev |
0.3.45
patch
Dependencies (23)
+ 15 more
Changelog
Compare changes
|
|
0.3.44
patch
1 CVE
CVE-2026-25727
GHSA-r6v5-fh4h-64xc
RUSTSEC-2026-0009
Feb 05, 2026
time vulnerable to stack exhaustion Denial of Service attack
Medium
Network
High
Low
ImpactWhen user-provided input is provided to any type that parses with the RFC 2822 format, a denial of service attack via stack exhaustion is possible. The attack relies on formally deprecated and rarely-used features that are part of the RFC 2822 format used in a malicious manner. Ordinary, non-malicious input will never encounter this scenario. PatchesA limit to the depth of recursion was added in v0.3.47. From this version, an error will be returned rather than exhausting the stack. WorkaroundsLimiting the length of user input is the simplest way to avoid stack exhaustion, as the amount of the stack consumed would be at most a factor of the length of the input. Alternatively, avoiding the format altogether would also ensure that the vulnerability is not encountered. To do this, add to your Fixed in
0.3.47
References
Updated Sep 10, 2026 · Source: OSV.dev |
0.3.44
patch
Dependencies (23)
+ 15 more
Changelog
Compare changes
|
|
0.3.43
patch
1 CVE
CVE-2026-25727
GHSA-r6v5-fh4h-64xc
RUSTSEC-2026-0009
Feb 05, 2026
time vulnerable to stack exhaustion Denial of Service attack
Medium
Network
High
Low
ImpactWhen user-provided input is provided to any type that parses with the RFC 2822 format, a denial of service attack via stack exhaustion is possible. The attack relies on formally deprecated and rarely-used features that are part of the RFC 2822 format used in a malicious manner. Ordinary, non-malicious input will never encounter this scenario. PatchesA limit to the depth of recursion was added in v0.3.47. From this version, an error will be returned rather than exhausting the stack. WorkaroundsLimiting the length of user input is the simplest way to avoid stack exhaustion, as the amount of the stack consumed would be at most a factor of the length of the input. Alternatively, avoiding the format altogether would also ensure that the vulnerability is not encountered. To do this, add to your Fixed in
0.3.47
References
Updated Sep 10, 2026 · Source: OSV.dev |
0.3.43
patch
Dependencies (22)
+ 14 more
Changelog
Compare changes
|
|
0.3.42
patch
1 CVE
CVE-2026-25727
GHSA-r6v5-fh4h-64xc
RUSTSEC-2026-0009
Feb 05, 2026
time vulnerable to stack exhaustion Denial of Service attack
Medium
Network
High
Low
ImpactWhen user-provided input is provided to any type that parses with the RFC 2822 format, a denial of service attack via stack exhaustion is possible. The attack relies on formally deprecated and rarely-used features that are part of the RFC 2822 format used in a malicious manner. Ordinary, non-malicious input will never encounter this scenario. PatchesA limit to the depth of recursion was added in v0.3.47. From this version, an error will be returned rather than exhausting the stack. WorkaroundsLimiting the length of user input is the simplest way to avoid stack exhaustion, as the amount of the stack consumed would be at most a factor of the length of the input. Alternatively, avoiding the format altogether would also ensure that the vulnerability is not encountered. To do this, add to your Fixed in
0.3.47
References
Updated Sep 10, 2026 · Source: OSV.dev |
0.3.42
patch
Dependencies (22)
+ 14 more
Changelog
Compare changes
|
|
0.3.41
patch
1 CVE
CVE-2026-25727
GHSA-r6v5-fh4h-64xc
RUSTSEC-2026-0009
Feb 05, 2026
time vulnerable to stack exhaustion Denial of Service attack
Medium
Network
High
Low
ImpactWhen user-provided input is provided to any type that parses with the RFC 2822 format, a denial of service attack via stack exhaustion is possible. The attack relies on formally deprecated and rarely-used features that are part of the RFC 2822 format used in a malicious manner. Ordinary, non-malicious input will never encounter this scenario. PatchesA limit to the depth of recursion was added in v0.3.47. From this version, an error will be returned rather than exhausting the stack. WorkaroundsLimiting the length of user input is the simplest way to avoid stack exhaustion, as the amount of the stack consumed would be at most a factor of the length of the input. Alternatively, avoiding the format altogether would also ensure that the vulnerability is not encountered. To do this, add to your Fixed in
0.3.47
References
Updated Sep 10, 2026 · Source: OSV.dev |
0.3.41
patch
Dependencies (23)
+ 15 more
Changelog
Compare changes
|
|
0.3.40
patch
1 CVE
CVE-2026-25727
GHSA-r6v5-fh4h-64xc
RUSTSEC-2026-0009
Feb 05, 2026
time vulnerable to stack exhaustion Denial of Service attack
Medium
Network
High
Low
ImpactWhen user-provided input is provided to any type that parses with the RFC 2822 format, a denial of service attack via stack exhaustion is possible. The attack relies on formally deprecated and rarely-used features that are part of the RFC 2822 format used in a malicious manner. Ordinary, non-malicious input will never encounter this scenario. PatchesA limit to the depth of recursion was added in v0.3.47. From this version, an error will be returned rather than exhausting the stack. WorkaroundsLimiting the length of user input is the simplest way to avoid stack exhaustion, as the amount of the stack consumed would be at most a factor of the length of the input. Alternatively, avoiding the format altogether would also ensure that the vulnerability is not encountered. To do this, add to your Fixed in
0.3.47
References
Updated Sep 10, 2026 · Source: OSV.dev |
0.3.40
patch
Dependencies (23)
+ 15 more
Changelog
Compare changes
|
|
0.3.39
patch
1 CVE
CVE-2026-25727
GHSA-r6v5-fh4h-64xc
RUSTSEC-2026-0009
Feb 05, 2026
time vulnerable to stack exhaustion Denial of Service attack
Medium
Network
High
Low
ImpactWhen user-provided input is provided to any type that parses with the RFC 2822 format, a denial of service attack via stack exhaustion is possible. The attack relies on formally deprecated and rarely-used features that are part of the RFC 2822 format used in a malicious manner. Ordinary, non-malicious input will never encounter this scenario. PatchesA limit to the depth of recursion was added in v0.3.47. From this version, an error will be returned rather than exhausting the stack. WorkaroundsLimiting the length of user input is the simplest way to avoid stack exhaustion, as the amount of the stack consumed would be at most a factor of the length of the input. Alternatively, avoiding the format altogether would also ensure that the vulnerability is not encountered. To do this, add to your Fixed in
0.3.47
References
Updated Sep 10, 2026 · Source: OSV.dev |
0.3.39
patch
Dependencies (23)
+ 15 more
Changelog
Compare changes
|
|
0.3.38
patch
1 CVE
CVE-2026-25727
GHSA-r6v5-fh4h-64xc
RUSTSEC-2026-0009
Feb 05, 2026
time vulnerable to stack exhaustion Denial of Service attack
Medium
Network
High
Low
ImpactWhen user-provided input is provided to any type that parses with the RFC 2822 format, a denial of service attack via stack exhaustion is possible. The attack relies on formally deprecated and rarely-used features that are part of the RFC 2822 format used in a malicious manner. Ordinary, non-malicious input will never encounter this scenario. PatchesA limit to the depth of recursion was added in v0.3.47. From this version, an error will be returned rather than exhausting the stack. WorkaroundsLimiting the length of user input is the simplest way to avoid stack exhaustion, as the amount of the stack consumed would be at most a factor of the length of the input. Alternatively, avoiding the format altogether would also ensure that the vulnerability is not encountered. To do this, add to your Fixed in
0.3.47
References
Updated Sep 10, 2026 · Source: OSV.dev |
0.3.38
patch
Dependencies (23)
+ 15 more
Changelog
Compare changes
|
|
0.3.37
patch
1 CVE
CVE-2026-25727
GHSA-r6v5-fh4h-64xc
RUSTSEC-2026-0009
Feb 05, 2026
time vulnerable to stack exhaustion Denial of Service attack
Medium
Network
High
Low
ImpactWhen user-provided input is provided to any type that parses with the RFC 2822 format, a denial of service attack via stack exhaustion is possible. The attack relies on formally deprecated and rarely-used features that are part of the RFC 2822 format used in a malicious manner. Ordinary, non-malicious input will never encounter this scenario. PatchesA limit to the depth of recursion was added in v0.3.47. From this version, an error will be returned rather than exhausting the stack. WorkaroundsLimiting the length of user input is the simplest way to avoid stack exhaustion, as the amount of the stack consumed would be at most a factor of the length of the input. Alternatively, avoiding the format altogether would also ensure that the vulnerability is not encountered. To do this, add to your Fixed in
0.3.47
References
Updated Sep 10, 2026 · Source: OSV.dev |
0.3.37
patch
Dependencies (23)
+ 15 more
Changelog
Compare changes
|
|
0.3.36
patch
1 CVE
CVE-2026-25727
GHSA-r6v5-fh4h-64xc
RUSTSEC-2026-0009
Feb 05, 2026
time vulnerable to stack exhaustion Denial of Service attack
Medium
Network
High
Low
ImpactWhen user-provided input is provided to any type that parses with the RFC 2822 format, a denial of service attack via stack exhaustion is possible. The attack relies on formally deprecated and rarely-used features that are part of the RFC 2822 format used in a malicious manner. Ordinary, non-malicious input will never encounter this scenario. PatchesA limit to the depth of recursion was added in v0.3.47. From this version, an error will be returned rather than exhausting the stack. WorkaroundsLimiting the length of user input is the simplest way to avoid stack exhaustion, as the amount of the stack consumed would be at most a factor of the length of the input. Alternatively, avoiding the format altogether would also ensure that the vulnerability is not encountered. To do this, add to your Fixed in
0.3.47
References
Updated Sep 10, 2026 · Source: OSV.dev |
0.3.36
patch
Dependencies (23)
+ 15 more
Changelog
Compare changes
|
|
0.3.35
patch
1 CVE
CVE-2026-25727
GHSA-r6v5-fh4h-64xc
RUSTSEC-2026-0009
Feb 05, 2026
time vulnerable to stack exhaustion Denial of Service attack
Medium
Network
High
Low
ImpactWhen user-provided input is provided to any type that parses with the RFC 2822 format, a denial of service attack via stack exhaustion is possible. The attack relies on formally deprecated and rarely-used features that are part of the RFC 2822 format used in a malicious manner. Ordinary, non-malicious input will never encounter this scenario. PatchesA limit to the depth of recursion was added in v0.3.47. From this version, an error will be returned rather than exhausting the stack. WorkaroundsLimiting the length of user input is the simplest way to avoid stack exhaustion, as the amount of the stack consumed would be at most a factor of the length of the input. Alternatively, avoiding the format altogether would also ensure that the vulnerability is not encountered. To do this, add to your Fixed in
0.3.47
References
Updated Sep 10, 2026 · Source: OSV.dev |
0.3.35
patch
Dependencies (23)
+ 15 more
Changelog
Compare changes
|
|
0.3.34
patch
1 CVE
CVE-2026-25727
GHSA-r6v5-fh4h-64xc
RUSTSEC-2026-0009
Feb 05, 2026
time vulnerable to stack exhaustion Denial of Service attack
Medium
Network
High
Low
ImpactWhen user-provided input is provided to any type that parses with the RFC 2822 format, a denial of service attack via stack exhaustion is possible. The attack relies on formally deprecated and rarely-used features that are part of the RFC 2822 format used in a malicious manner. Ordinary, non-malicious input will never encounter this scenario. PatchesA limit to the depth of recursion was added in v0.3.47. From this version, an error will be returned rather than exhausting the stack. WorkaroundsLimiting the length of user input is the simplest way to avoid stack exhaustion, as the amount of the stack consumed would be at most a factor of the length of the input. Alternatively, avoiding the format altogether would also ensure that the vulnerability is not encountered. To do this, add to your Fixed in
0.3.47
References
Updated Sep 10, 2026 · Source: OSV.dev |
0.3.34
patch
Dependencies (23)
+ 15 more
Changelog
Compare changes
|
|
0.3.33
patch
1 CVE
CVE-2026-25727
GHSA-r6v5-fh4h-64xc
RUSTSEC-2026-0009
Feb 05, 2026
time vulnerable to stack exhaustion Denial of Service attack
Medium
Network
High
Low
ImpactWhen user-provided input is provided to any type that parses with the RFC 2822 format, a denial of service attack via stack exhaustion is possible. The attack relies on formally deprecated and rarely-used features that are part of the RFC 2822 format used in a malicious manner. Ordinary, non-malicious input will never encounter this scenario. PatchesA limit to the depth of recursion was added in v0.3.47. From this version, an error will be returned rather than exhausting the stack. WorkaroundsLimiting the length of user input is the simplest way to avoid stack exhaustion, as the amount of the stack consumed would be at most a factor of the length of the input. Alternatively, avoiding the format altogether would also ensure that the vulnerability is not encountered. To do this, add to your Fixed in
0.3.47
References
Updated Sep 10, 2026 · Source: OSV.dev |
0.3.33
patch
Dependencies (23)
+ 15 more
Changelog
Compare changes
|
|
0.3.32
patch
1 CVE
CVE-2026-25727
GHSA-r6v5-fh4h-64xc
RUSTSEC-2026-0009
Feb 05, 2026
time vulnerable to stack exhaustion Denial of Service attack
Medium
Network
High
Low
ImpactWhen user-provided input is provided to any type that parses with the RFC 2822 format, a denial of service attack via stack exhaustion is possible. The attack relies on formally deprecated and rarely-used features that are part of the RFC 2822 format used in a malicious manner. Ordinary, non-malicious input will never encounter this scenario. PatchesA limit to the depth of recursion was added in v0.3.47. From this version, an error will be returned rather than exhausting the stack. WorkaroundsLimiting the length of user input is the simplest way to avoid stack exhaustion, as the amount of the stack consumed would be at most a factor of the length of the input. Alternatively, avoiding the format altogether would also ensure that the vulnerability is not encountered. To do this, add to your Fixed in
0.3.47
References
Updated Sep 10, 2026 · Source: OSV.dev |
0.3.32
patch
Dependencies (23)
+ 15 more
Changelog
Compare changes
|
|
0.3.31
patch
1 CVE
CVE-2026-25727
GHSA-r6v5-fh4h-64xc
RUSTSEC-2026-0009
Feb 05, 2026
time vulnerable to stack exhaustion Denial of Service attack
Medium
Network
High
Low
ImpactWhen user-provided input is provided to any type that parses with the RFC 2822 format, a denial of service attack via stack exhaustion is possible. The attack relies on formally deprecated and rarely-used features that are part of the RFC 2822 format used in a malicious manner. Ordinary, non-malicious input will never encounter this scenario. PatchesA limit to the depth of recursion was added in v0.3.47. From this version, an error will be returned rather than exhausting the stack. WorkaroundsLimiting the length of user input is the simplest way to avoid stack exhaustion, as the amount of the stack consumed would be at most a factor of the length of the input. Alternatively, avoiding the format altogether would also ensure that the vulnerability is not encountered. To do this, add to your Fixed in
0.3.47
References
Updated Sep 10, 2026 · Source: OSV.dev |
0.3.31
patch
Dependencies (21)
+ 13 more
Changelog
Compare changes
|
|
0.3.30
patch
1 CVE
CVE-2026-25727
GHSA-r6v5-fh4h-64xc
RUSTSEC-2026-0009
Feb 05, 2026
time vulnerable to stack exhaustion Denial of Service attack
Medium
Network
High
Low
ImpactWhen user-provided input is provided to any type that parses with the RFC 2822 format, a denial of service attack via stack exhaustion is possible. The attack relies on formally deprecated and rarely-used features that are part of the RFC 2822 format used in a malicious manner. Ordinary, non-malicious input will never encounter this scenario. PatchesA limit to the depth of recursion was added in v0.3.47. From this version, an error will be returned rather than exhausting the stack. WorkaroundsLimiting the length of user input is the simplest way to avoid stack exhaustion, as the amount of the stack consumed would be at most a factor of the length of the input. Alternatively, avoiding the format altogether would also ensure that the vulnerability is not encountered. To do this, add to your Fixed in
0.3.47
References
Updated Sep 10, 2026 · Source: OSV.dev |
0.3.30
patch
Dependencies (21)
+ 13 more
Changelog
Compare changes
|
|
0.3.29
patch
1 CVE
CVE-2026-25727
GHSA-r6v5-fh4h-64xc
RUSTSEC-2026-0009
Feb 05, 2026
time vulnerable to stack exhaustion Denial of Service attack
Medium
Network
High
Low
ImpactWhen user-provided input is provided to any type that parses with the RFC 2822 format, a denial of service attack via stack exhaustion is possible. The attack relies on formally deprecated and rarely-used features that are part of the RFC 2822 format used in a malicious manner. Ordinary, non-malicious input will never encounter this scenario. PatchesA limit to the depth of recursion was added in v0.3.47. From this version, an error will be returned rather than exhausting the stack. WorkaroundsLimiting the length of user input is the simplest way to avoid stack exhaustion, as the amount of the stack consumed would be at most a factor of the length of the input. Alternatively, avoiding the format altogether would also ensure that the vulnerability is not encountered. To do this, add to your Fixed in
0.3.47
References
Updated Sep 10, 2026 · Source: OSV.dev |
0.3.29
patch
Dependencies (20)
+ 12 more
Changelog
Compare changes
|
|
0.3.28
patch
1 CVE
CVE-2026-25727
GHSA-r6v5-fh4h-64xc
RUSTSEC-2026-0009
Feb 05, 2026
time vulnerable to stack exhaustion Denial of Service attack
Medium
Network
High
Low
ImpactWhen user-provided input is provided to any type that parses with the RFC 2822 format, a denial of service attack via stack exhaustion is possible. The attack relies on formally deprecated and rarely-used features that are part of the RFC 2822 format used in a malicious manner. Ordinary, non-malicious input will never encounter this scenario. PatchesA limit to the depth of recursion was added in v0.3.47. From this version, an error will be returned rather than exhausting the stack. WorkaroundsLimiting the length of user input is the simplest way to avoid stack exhaustion, as the amount of the stack consumed would be at most a factor of the length of the input. Alternatively, avoiding the format altogether would also ensure that the vulnerability is not encountered. To do this, add to your Fixed in
0.3.47
References
Updated Sep 10, 2026 · Source: OSV.dev |
0.3.28
patch
Dependencies (18)
+ 10 more
Changelog
Compare changes
|
|
0.3.27
patch
1 CVE
CVE-2026-25727
GHSA-r6v5-fh4h-64xc
RUSTSEC-2026-0009
Feb 05, 2026
time vulnerable to stack exhaustion Denial of Service attack
Medium
Network
High
Low
ImpactWhen user-provided input is provided to any type that parses with the RFC 2822 format, a denial of service attack via stack exhaustion is possible. The attack relies on formally deprecated and rarely-used features that are part of the RFC 2822 format used in a malicious manner. Ordinary, non-malicious input will never encounter this scenario. PatchesA limit to the depth of recursion was added in v0.3.47. From this version, an error will be returned rather than exhausting the stack. WorkaroundsLimiting the length of user input is the simplest way to avoid stack exhaustion, as the amount of the stack consumed would be at most a factor of the length of the input. Alternatively, avoiding the format altogether would also ensure that the vulnerability is not encountered. To do this, add to your Fixed in
0.3.47
References
Updated Sep 10, 2026 · Source: OSV.dev |
0.3.27
patch
Dependencies (18)
+ 10 more
Changelog
Compare changes
|
|
0.3.26
patch
1 CVE
CVE-2026-25727
GHSA-r6v5-fh4h-64xc
RUSTSEC-2026-0009
Feb 05, 2026
time vulnerable to stack exhaustion Denial of Service attack
Medium
Network
High
Low
ImpactWhen user-provided input is provided to any type that parses with the RFC 2822 format, a denial of service attack via stack exhaustion is possible. The attack relies on formally deprecated and rarely-used features that are part of the RFC 2822 format used in a malicious manner. Ordinary, non-malicious input will never encounter this scenario. PatchesA limit to the depth of recursion was added in v0.3.47. From this version, an error will be returned rather than exhausting the stack. WorkaroundsLimiting the length of user input is the simplest way to avoid stack exhaustion, as the amount of the stack consumed would be at most a factor of the length of the input. Alternatively, avoiding the format altogether would also ensure that the vulnerability is not encountered. To do this, add to your Fixed in
0.3.47
References
Updated Sep 10, 2026 · Source: OSV.dev |
0.3.26
patch
Dependencies (18)
+ 10 more
Changelog
Compare changes
|
|
0.3.25
patch
1 CVE
CVE-2026-25727
GHSA-r6v5-fh4h-64xc
RUSTSEC-2026-0009
Feb 05, 2026
time vulnerable to stack exhaustion Denial of Service attack
Medium
Network
High
Low
ImpactWhen user-provided input is provided to any type that parses with the RFC 2822 format, a denial of service attack via stack exhaustion is possible. The attack relies on formally deprecated and rarely-used features that are part of the RFC 2822 format used in a malicious manner. Ordinary, non-malicious input will never encounter this scenario. PatchesA limit to the depth of recursion was added in v0.3.47. From this version, an error will be returned rather than exhausting the stack. WorkaroundsLimiting the length of user input is the simplest way to avoid stack exhaustion, as the amount of the stack consumed would be at most a factor of the length of the input. Alternatively, avoiding the format altogether would also ensure that the vulnerability is not encountered. To do this, add to your Fixed in
0.3.47
References
Updated Sep 10, 2026 · Source: OSV.dev |
0.3.25
patch
Dependencies (18)
+ 10 more
Changelog
Compare changes
|
|
0.3.24
patch
1 CVE
CVE-2026-25727
GHSA-r6v5-fh4h-64xc
RUSTSEC-2026-0009
Feb 05, 2026
time vulnerable to stack exhaustion Denial of Service attack
Medium
Network
High
Low
ImpactWhen user-provided input is provided to any type that parses with the RFC 2822 format, a denial of service attack via stack exhaustion is possible. The attack relies on formally deprecated and rarely-used features that are part of the RFC 2822 format used in a malicious manner. Ordinary, non-malicious input will never encounter this scenario. PatchesA limit to the depth of recursion was added in v0.3.47. From this version, an error will be returned rather than exhausting the stack. WorkaroundsLimiting the length of user input is the simplest way to avoid stack exhaustion, as the amount of the stack consumed would be at most a factor of the length of the input. Alternatively, avoiding the format altogether would also ensure that the vulnerability is not encountered. To do this, add to your Fixed in
0.3.47
References
Updated Sep 10, 2026 · Source: OSV.dev |
0.3.24
patch
Dependencies (18)
+ 10 more
Changelog
Compare changes
|
|
0.3.23
patch
1 CVE
CVE-2026-25727
GHSA-r6v5-fh4h-64xc
RUSTSEC-2026-0009
Feb 05, 2026
time vulnerable to stack exhaustion Denial of Service attack
Medium
Network
High
Low
ImpactWhen user-provided input is provided to any type that parses with the RFC 2822 format, a denial of service attack via stack exhaustion is possible. The attack relies on formally deprecated and rarely-used features that are part of the RFC 2822 format used in a malicious manner. Ordinary, non-malicious input will never encounter this scenario. PatchesA limit to the depth of recursion was added in v0.3.47. From this version, an error will be returned rather than exhausting the stack. WorkaroundsLimiting the length of user input is the simplest way to avoid stack exhaustion, as the amount of the stack consumed would be at most a factor of the length of the input. Alternatively, avoiding the format altogether would also ensure that the vulnerability is not encountered. To do this, add to your Fixed in
0.3.47
References
Updated Sep 10, 2026 · Source: OSV.dev |
0.3.23
patch
Dependencies (17)
+ 9 more
Changelog
Compare changes
|
|
0.3.22
patch
1 CVE
CVE-2026-25727
GHSA-r6v5-fh4h-64xc
RUSTSEC-2026-0009
Feb 05, 2026
time vulnerable to stack exhaustion Denial of Service attack
Medium
Network
High
Low
ImpactWhen user-provided input is provided to any type that parses with the RFC 2822 format, a denial of service attack via stack exhaustion is possible. The attack relies on formally deprecated and rarely-used features that are part of the RFC 2822 format used in a malicious manner. Ordinary, non-malicious input will never encounter this scenario. PatchesA limit to the depth of recursion was added in v0.3.47. From this version, an error will be returned rather than exhausting the stack. WorkaroundsLimiting the length of user input is the simplest way to avoid stack exhaustion, as the amount of the stack consumed would be at most a factor of the length of the input. Alternatively, avoiding the format altogether would also ensure that the vulnerability is not encountered. To do this, add to your Fixed in
0.3.47
References
Updated Sep 10, 2026 · Source: OSV.dev |
0.3.22
patch
Dependencies (17)
+ 9 more
Changelog
Compare changes
|
|
0.3.21
patch
1 CVE
CVE-2026-25727
GHSA-r6v5-fh4h-64xc
RUSTSEC-2026-0009
Feb 05, 2026
time vulnerable to stack exhaustion Denial of Service attack
Medium
Network
High
Low
ImpactWhen user-provided input is provided to any type that parses with the RFC 2822 format, a denial of service attack via stack exhaustion is possible. The attack relies on formally deprecated and rarely-used features that are part of the RFC 2822 format used in a malicious manner. Ordinary, non-malicious input will never encounter this scenario. PatchesA limit to the depth of recursion was added in v0.3.47. From this version, an error will be returned rather than exhausting the stack. WorkaroundsLimiting the length of user input is the simplest way to avoid stack exhaustion, as the amount of the stack consumed would be at most a factor of the length of the input. Alternatively, avoiding the format altogether would also ensure that the vulnerability is not encountered. To do this, add to your Fixed in
0.3.47
References
Updated Sep 10, 2026 · Source: OSV.dev |
0.3.21
patch
Dependencies (17)
+ 9 more
Changelog
Compare changes
|
|
0.3.20
patch
1 CVE
CVE-2026-25727
GHSA-r6v5-fh4h-64xc
RUSTSEC-2026-0009
Feb 05, 2026
time vulnerable to stack exhaustion Denial of Service attack
Medium
Network
High
Low
ImpactWhen user-provided input is provided to any type that parses with the RFC 2822 format, a denial of service attack via stack exhaustion is possible. The attack relies on formally deprecated and rarely-used features that are part of the RFC 2822 format used in a malicious manner. Ordinary, non-malicious input will never encounter this scenario. PatchesA limit to the depth of recursion was added in v0.3.47. From this version, an error will be returned rather than exhausting the stack. WorkaroundsLimiting the length of user input is the simplest way to avoid stack exhaustion, as the amount of the stack consumed would be at most a factor of the length of the input. Alternatively, avoiding the format altogether would also ensure that the vulnerability is not encountered. To do this, add to your Fixed in
0.3.47
References
Updated Sep 10, 2026 · Source: OSV.dev |
0.3.20
patch
Dependencies (17)
+ 9 more
Changelog
Compare changes
|
|
0.3.19
patch
1 CVE
CVE-2026-25727
GHSA-r6v5-fh4h-64xc
RUSTSEC-2026-0009
Feb 05, 2026
time vulnerable to stack exhaustion Denial of Service attack
Medium
Network
High
Low
ImpactWhen user-provided input is provided to any type that parses with the RFC 2822 format, a denial of service attack via stack exhaustion is possible. The attack relies on formally deprecated and rarely-used features that are part of the RFC 2822 format used in a malicious manner. Ordinary, non-malicious input will never encounter this scenario. PatchesA limit to the depth of recursion was added in v0.3.47. From this version, an error will be returned rather than exhausting the stack. WorkaroundsLimiting the length of user input is the simplest way to avoid stack exhaustion, as the amount of the stack consumed would be at most a factor of the length of the input. Alternatively, avoiding the format altogether would also ensure that the vulnerability is not encountered. To do this, add to your Fixed in
0.3.47
References
Updated Sep 10, 2026 · Source: OSV.dev |
0.3.19
patch
Dependencies (17)
+ 9 more
Changelog
Compare changes
|
|
0.3.18
patch
1 CVE
CVE-2026-25727
GHSA-r6v5-fh4h-64xc
RUSTSEC-2026-0009
Feb 05, 2026
time vulnerable to stack exhaustion Denial of Service attack
Medium
Network
High
Low
ImpactWhen user-provided input is provided to any type that parses with the RFC 2822 format, a denial of service attack via stack exhaustion is possible. The attack relies on formally deprecated and rarely-used features that are part of the RFC 2822 format used in a malicious manner. Ordinary, non-malicious input will never encounter this scenario. PatchesA limit to the depth of recursion was added in v0.3.47. From this version, an error will be returned rather than exhausting the stack. WorkaroundsLimiting the length of user input is the simplest way to avoid stack exhaustion, as the amount of the stack consumed would be at most a factor of the length of the input. Alternatively, avoiding the format altogether would also ensure that the vulnerability is not encountered. To do this, add to your Fixed in
0.3.47
References
Updated Sep 10, 2026 · Source: OSV.dev |
0.3.18
patch
Dependencies (17)
+ 9 more
Changelog
Compare changes
|
|
0.1.45
patch
1 CVE
CVE-2020-26235
GHSA-wcg3-cvx6-7396
RUSTSEC-2020-0071
Aug 25, 2021
Segmentation fault in time
6.2
/ 10
Medium
Local
Low
None
None
Unchanged
None
None
High
ImpactUnix-like operating systems may segfault due to dereferencing a dangling pointer in specific circumstances. This requires an environment variable to be set in a different thread than the affected functions. This may occur without the user's knowledge, notably in a third-party library. The affected functions from time 0.2.7 through 0.2.22 are:
The affected functions in time 0.1 (all versions) are:
Non-Unix targets (including Windows and wasm) are unaffected. PatchesIn some versions of Users and library authors with time in their dependency tree must perform Users of time 0.1 do not have a patch and must upgrade to an unaffected version: time 0.2.23 or greater or the 0.3 series. WorkaroundsLibrary authors must ensure that the program only has one running thread at the time of calling any affected method. Binary authors may do the same and/or ensure that no other thread is actively mutating the environment. ReferencesFixed in
0.2.23
References Updated Sep 10, 2026 · Source: OSV.dev | ||
0.3.17
patch
1 CVE
CVE-2026-25727
GHSA-r6v5-fh4h-64xc
RUSTSEC-2026-0009
Feb 05, 2026
time vulnerable to stack exhaustion Denial of Service attack
Medium
Network
High
Low
ImpactWhen user-provided input is provided to any type that parses with the RFC 2822 format, a denial of service attack via stack exhaustion is possible. The attack relies on formally deprecated and rarely-used features that are part of the RFC 2822 format used in a malicious manner. Ordinary, non-malicious input will never encounter this scenario. PatchesA limit to the depth of recursion was added in v0.3.47. From this version, an error will be returned rather than exhausting the stack. WorkaroundsLimiting the length of user input is the simplest way to avoid stack exhaustion, as the amount of the stack consumed would be at most a factor of the length of the input. Alternatively, avoiding the format altogether would also ensure that the vulnerability is not encountered. To do this, add to your Fixed in
0.3.47
References
Updated Sep 10, 2026 · Source: OSV.dev |
0.3.17
patch
Dependencies (17)
+ 9 more
Changelog
Compare changes
|
|
0.3.16
patch
1 CVE
CVE-2026-25727
GHSA-r6v5-fh4h-64xc
RUSTSEC-2026-0009
Feb 05, 2026
time vulnerable to stack exhaustion Denial of Service attack
Medium
Network
High
Low
ImpactWhen user-provided input is provided to any type that parses with the RFC 2822 format, a denial of service attack via stack exhaustion is possible. The attack relies on formally deprecated and rarely-used features that are part of the RFC 2822 format used in a malicious manner. Ordinary, non-malicious input will never encounter this scenario. PatchesA limit to the depth of recursion was added in v0.3.47. From this version, an error will be returned rather than exhausting the stack. WorkaroundsLimiting the length of user input is the simplest way to avoid stack exhaustion, as the amount of the stack consumed would be at most a factor of the length of the input. Alternatively, avoiding the format altogether would also ensure that the vulnerability is not encountered. To do this, add to your Fixed in
0.3.47
References
Updated Sep 10, 2026 · Source: OSV.dev |
0.3.16
patch
Dependencies (16)
+ 8 more
Changelog
Compare changes
|
|
0.3.15
patch
1 CVE
CVE-2026-25727
GHSA-r6v5-fh4h-64xc
RUSTSEC-2026-0009
Feb 05, 2026
time vulnerable to stack exhaustion Denial of Service attack
Medium
Network
High
Low
ImpactWhen user-provided input is provided to any type that parses with the RFC 2822 format, a denial of service attack via stack exhaustion is possible. The attack relies on formally deprecated and rarely-used features that are part of the RFC 2822 format used in a malicious manner. Ordinary, non-malicious input will never encounter this scenario. PatchesA limit to the depth of recursion was added in v0.3.47. From this version, an error will be returned rather than exhausting the stack. WorkaroundsLimiting the length of user input is the simplest way to avoid stack exhaustion, as the amount of the stack consumed would be at most a factor of the length of the input. Alternatively, avoiding the format altogether would also ensure that the vulnerability is not encountered. To do this, add to your Fixed in
0.3.47
References
Updated Sep 10, 2026 · Source: OSV.dev |
0.3.15
patch
Dependencies (15)
+ 7 more
Changelog
Compare changes
|
|
0.3.14
patch
1 CVE
CVE-2026-25727
GHSA-r6v5-fh4h-64xc
RUSTSEC-2026-0009
Feb 05, 2026
time vulnerable to stack exhaustion Denial of Service attack
Medium
Network
High
Low
ImpactWhen user-provided input is provided to any type that parses with the RFC 2822 format, a denial of service attack via stack exhaustion is possible. The attack relies on formally deprecated and rarely-used features that are part of the RFC 2822 format used in a malicious manner. Ordinary, non-malicious input will never encounter this scenario. PatchesA limit to the depth of recursion was added in v0.3.47. From this version, an error will be returned rather than exhausting the stack. WorkaroundsLimiting the length of user input is the simplest way to avoid stack exhaustion, as the amount of the stack consumed would be at most a factor of the length of the input. Alternatively, avoiding the format altogether would also ensure that the vulnerability is not encountered. To do this, add to your Fixed in
0.3.47
References
Updated Sep 10, 2026 · Source: OSV.dev |
0.3.14
patch
Dependencies (16)
+ 8 more
Changelog
Compare changes
|
|
0.3.13
patch
1 CVE
CVE-2026-25727
GHSA-r6v5-fh4h-64xc
RUSTSEC-2026-0009
Feb 05, 2026
time vulnerable to stack exhaustion Denial of Service attack
Medium
Network
High
Low
ImpactWhen user-provided input is provided to any type that parses with the RFC 2822 format, a denial of service attack via stack exhaustion is possible. The attack relies on formally deprecated and rarely-used features that are part of the RFC 2822 format used in a malicious manner. Ordinary, non-malicious input will never encounter this scenario. PatchesA limit to the depth of recursion was added in v0.3.47. From this version, an error will be returned rather than exhausting the stack. WorkaroundsLimiting the length of user input is the simplest way to avoid stack exhaustion, as the amount of the stack consumed would be at most a factor of the length of the input. Alternatively, avoiding the format altogether would also ensure that the vulnerability is not encountered. To do this, add to your Fixed in
0.3.47
References
Updated Sep 10, 2026 · Source: OSV.dev |
0.3.13
patch
Dependencies (16)
+ 8 more
Changelog
Compare changes
|
|
0.3.12
patch
1 CVE
CVE-2026-25727
GHSA-r6v5-fh4h-64xc
RUSTSEC-2026-0009
Feb 05, 2026
time vulnerable to stack exhaustion Denial of Service attack
Medium
Network
High
Low
ImpactWhen user-provided input is provided to any type that parses with the RFC 2822 format, a denial of service attack via stack exhaustion is possible. The attack relies on formally deprecated and rarely-used features that are part of the RFC 2822 format used in a malicious manner. Ordinary, non-malicious input will never encounter this scenario. PatchesA limit to the depth of recursion was added in v0.3.47. From this version, an error will be returned rather than exhausting the stack. WorkaroundsLimiting the length of user input is the simplest way to avoid stack exhaustion, as the amount of the stack consumed would be at most a factor of the length of the input. Alternatively, avoiding the format altogether would also ensure that the vulnerability is not encountered. To do this, add to your Fixed in
0.3.47
References
Updated Sep 10, 2026 · Source: OSV.dev |
0.3.12
patch
Dependencies (16)
+ 8 more
Changelog
Compare changes
|
|
0.3.11
patch
1 CVE
CVE-2026-25727
GHSA-r6v5-fh4h-64xc
RUSTSEC-2026-0009
Feb 05, 2026
time vulnerable to stack exhaustion Denial of Service attack
Medium
Network
High
Low
ImpactWhen user-provided input is provided to any type that parses with the RFC 2822 format, a denial of service attack via stack exhaustion is possible. The attack relies on formally deprecated and rarely-used features that are part of the RFC 2822 format used in a malicious manner. Ordinary, non-malicious input will never encounter this scenario. PatchesA limit to the depth of recursion was added in v0.3.47. From this version, an error will be returned rather than exhausting the stack. WorkaroundsLimiting the length of user input is the simplest way to avoid stack exhaustion, as the amount of the stack consumed would be at most a factor of the length of the input. Alternatively, avoiding the format altogether would also ensure that the vulnerability is not encountered. To do this, add to your Fixed in
0.3.47
References
Updated Sep 10, 2026 · Source: OSV.dev |
0.3.11
patch
Dependencies (15)
+ 7 more
Changelog
Compare changes
|
|
0.3.10
patch
1 CVE
CVE-2026-25727
GHSA-r6v5-fh4h-64xc
RUSTSEC-2026-0009
Feb 05, 2026
time vulnerable to stack exhaustion Denial of Service attack
Medium
Network
High
Low
ImpactWhen user-provided input is provided to any type that parses with the RFC 2822 format, a denial of service attack via stack exhaustion is possible. The attack relies on formally deprecated and rarely-used features that are part of the RFC 2822 format used in a malicious manner. Ordinary, non-malicious input will never encounter this scenario. PatchesA limit to the depth of recursion was added in v0.3.47. From this version, an error will be returned rather than exhausting the stack. WorkaroundsLimiting the length of user input is the simplest way to avoid stack exhaustion, as the amount of the stack consumed would be at most a factor of the length of the input. Alternatively, avoiding the format altogether would also ensure that the vulnerability is not encountered. To do this, add to your Fixed in
0.3.47
References
Updated Sep 10, 2026 · Source: OSV.dev |
0.3.10
patch
Dependencies (15)
+ 7 more
Changelog
Compare changes
|
|
0.3.9
patch
1 CVE
CVE-2026-25727
GHSA-r6v5-fh4h-64xc
RUSTSEC-2026-0009
Feb 05, 2026
time vulnerable to stack exhaustion Denial of Service attack
Medium
Network
High
Low
ImpactWhen user-provided input is provided to any type that parses with the RFC 2822 format, a denial of service attack via stack exhaustion is possible. The attack relies on formally deprecated and rarely-used features that are part of the RFC 2822 format used in a malicious manner. Ordinary, non-malicious input will never encounter this scenario. PatchesA limit to the depth of recursion was added in v0.3.47. From this version, an error will be returned rather than exhausting the stack. WorkaroundsLimiting the length of user input is the simplest way to avoid stack exhaustion, as the amount of the stack consumed would be at most a factor of the length of the input. Alternatively, avoiding the format altogether would also ensure that the vulnerability is not encountered. To do this, add to your Fixed in
0.3.47
References
Updated Sep 10, 2026 · Source: OSV.dev |
0.3.9
patch
Dependencies (15)
+ 7 more
Changelog
Compare changes
|
|
0.3.8
patch
yanked
1 CVE
CVE-2026-25727
GHSA-r6v5-fh4h-64xc
RUSTSEC-2026-0009
Feb 05, 2026
time vulnerable to stack exhaustion Denial of Service attack
Medium
Network
High
Low
ImpactWhen user-provided input is provided to any type that parses with the RFC 2822 format, a denial of service attack via stack exhaustion is possible. The attack relies on formally deprecated and rarely-used features that are part of the RFC 2822 format used in a malicious manner. Ordinary, non-malicious input will never encounter this scenario. PatchesA limit to the depth of recursion was added in v0.3.47. From this version, an error will be returned rather than exhausting the stack. WorkaroundsLimiting the length of user input is the simplest way to avoid stack exhaustion, as the amount of the stack consumed would be at most a factor of the length of the input. Alternatively, avoiding the format altogether would also ensure that the vulnerability is not encountered. To do this, add to your Fixed in
0.3.47
References
Updated Sep 10, 2026 · Source: OSV.dev |
0.3.8
patch
yanked
Dependencies (15)
+ 7 more
Changelog
Compare changes
|
|
0.3.7
patch
1 CVE
CVE-2026-25727
GHSA-r6v5-fh4h-64xc
RUSTSEC-2026-0009
Feb 05, 2026
time vulnerable to stack exhaustion Denial of Service attack
Medium
Network
High
Low
ImpactWhen user-provided input is provided to any type that parses with the RFC 2822 format, a denial of service attack via stack exhaustion is possible. The attack relies on formally deprecated and rarely-used features that are part of the RFC 2822 format used in a malicious manner. Ordinary, non-malicious input will never encounter this scenario. PatchesA limit to the depth of recursion was added in v0.3.47. From this version, an error will be returned rather than exhausting the stack. WorkaroundsLimiting the length of user input is the simplest way to avoid stack exhaustion, as the amount of the stack consumed would be at most a factor of the length of the input. Alternatively, avoiding the format altogether would also ensure that the vulnerability is not encountered. To do this, add to your Fixed in
0.3.47
References
Updated Sep 10, 2026 · Source: OSV.dev |
0.3.7
patch
Dependencies (13)
+ 5 more
Changelog
Compare changes
|