fugit
time tools (cron, parsing, durations, ...) for Ruby, rufus-scheduler, and flor
View on Github
Activity
- Latest release
- 10h ago
- Total releases
- 62
- Cadence
- ~34 days
- Last 12 months
- 5
Reach
- Downloads
- 214.0M
- Stars
- 516
Details
- License
- MIT
- First release
- Jan 01, 2017
| Version | Released | |
|---|---|---|
1.14.0
minor
| ||
1.13.0
minor
| ||
1.12.3
patch
| ||
1.12.2
patch
| ||
1.12.1
patch
| ||
1.12.0
minor
| ||
1.11.2
patch
| ||
1.11.1
patch
| ||
1.11.0
minor
1 CVE
CVE-2024-43380
GHSA-2m96-52r3-2f3g
Aug 19, 2024
fugit parse and parse_nat stall on lengthy input
Medium
Network
Low
None
ImpactThe fugit "natural" parser, that turns "every wednesday at 5pm" into "0 17 * * 3", accepted any length of input and went on attempting to parse it, not returning promptly, as expected. The parse call could hold the thread with no end in sight. Fugit dependents that do not check (user) input length for plausability are impacted. PatchesProblem was reported in #104 and the fix was released in fugit 1.11.1 WorkaroundsBy making sure that In fewer words, making sure those fugit methods are not fed unvetted input strings. Referencesgh-104 Affected versions
0.1.0
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
1.0.0
1.1.0
1.1.1
1.1.10
+ 42 more Show less
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.10.0
1.10.1
1.11.0
1.2.0
1.2.1
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.8
1.3.9
1.4.0
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.5.0
1.5.1
1.5.2
1.5.3
1.6.0
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.9.0
Fixed in
1.11.1
References
Updated Aug 07, 2026 · Source: OSV.dev | ||
1.10.1
patch
1 CVE
CVE-2024-43380
GHSA-2m96-52r3-2f3g
Aug 19, 2024
fugit parse and parse_nat stall on lengthy input
Medium
Network
Low
None
ImpactThe fugit "natural" parser, that turns "every wednesday at 5pm" into "0 17 * * 3", accepted any length of input and went on attempting to parse it, not returning promptly, as expected. The parse call could hold the thread with no end in sight. Fugit dependents that do not check (user) input length for plausability are impacted. PatchesProblem was reported in #104 and the fix was released in fugit 1.11.1 WorkaroundsBy making sure that In fewer words, making sure those fugit methods are not fed unvetted input strings. Referencesgh-104 Affected versions
0.1.0
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
1.0.0
1.1.0
1.1.1
1.1.10
+ 42 more Show less
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.10.0
1.10.1
1.11.0
1.2.0
1.2.1
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.8
1.3.9
1.4.0
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.5.0
1.5.1
1.5.2
1.5.3
1.6.0
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.9.0
Fixed in
1.11.1
References
Updated Aug 07, 2026 · Source: OSV.dev | ||
1.10.0
minor
1 CVE
CVE-2024-43380
GHSA-2m96-52r3-2f3g
Aug 19, 2024
fugit parse and parse_nat stall on lengthy input
Medium
Network
Low
None
ImpactThe fugit "natural" parser, that turns "every wednesday at 5pm" into "0 17 * * 3", accepted any length of input and went on attempting to parse it, not returning promptly, as expected. The parse call could hold the thread with no end in sight. Fugit dependents that do not check (user) input length for plausability are impacted. PatchesProblem was reported in #104 and the fix was released in fugit 1.11.1 WorkaroundsBy making sure that In fewer words, making sure those fugit methods are not fed unvetted input strings. Referencesgh-104 Affected versions
0.1.0
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
1.0.0
1.1.0
1.1.1
1.1.10
+ 42 more Show less
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.10.0
1.10.1
1.11.0
1.2.0
1.2.1
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.8
1.3.9
1.4.0
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.5.0
1.5.1
1.5.2
1.5.3
1.6.0
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.9.0
Fixed in
1.11.1
References
Updated Aug 07, 2026 · Source: OSV.dev | ||
1.9.0
minor
1 CVE
CVE-2024-43380
GHSA-2m96-52r3-2f3g
Aug 19, 2024
fugit parse and parse_nat stall on lengthy input
Medium
Network
Low
None
ImpactThe fugit "natural" parser, that turns "every wednesday at 5pm" into "0 17 * * 3", accepted any length of input and went on attempting to parse it, not returning promptly, as expected. The parse call could hold the thread with no end in sight. Fugit dependents that do not check (user) input length for plausability are impacted. PatchesProblem was reported in #104 and the fix was released in fugit 1.11.1 WorkaroundsBy making sure that In fewer words, making sure those fugit methods are not fed unvetted input strings. Referencesgh-104 Affected versions
0.1.0
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
1.0.0
1.1.0
1.1.1
1.1.10
+ 42 more Show less
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.10.0
1.10.1
1.11.0
1.2.0
1.2.1
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.8
1.3.9
1.4.0
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.5.0
1.5.1
1.5.2
1.5.3
1.6.0
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.9.0
Fixed in
1.11.1
References
Updated Aug 07, 2026 · Source: OSV.dev | ||
1.8.1
patch
1 CVE
CVE-2024-43380
GHSA-2m96-52r3-2f3g
Aug 19, 2024
fugit parse and parse_nat stall on lengthy input
Medium
Network
Low
None
ImpactThe fugit "natural" parser, that turns "every wednesday at 5pm" into "0 17 * * 3", accepted any length of input and went on attempting to parse it, not returning promptly, as expected. The parse call could hold the thread with no end in sight. Fugit dependents that do not check (user) input length for plausability are impacted. PatchesProblem was reported in #104 and the fix was released in fugit 1.11.1 WorkaroundsBy making sure that In fewer words, making sure those fugit methods are not fed unvetted input strings. Referencesgh-104 Affected versions
0.1.0
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
1.0.0
1.1.0
1.1.1
1.1.10
+ 42 more Show less
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.10.0
1.10.1
1.11.0
1.2.0
1.2.1
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.8
1.3.9
1.4.0
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.5.0
1.5.1
1.5.2
1.5.3
1.6.0
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.9.0
Fixed in
1.11.1
References
Updated Aug 07, 2026 · Source: OSV.dev | ||
1.8.0
minor
1 CVE
CVE-2024-43380
GHSA-2m96-52r3-2f3g
Aug 19, 2024
fugit parse and parse_nat stall on lengthy input
Medium
Network
Low
None
ImpactThe fugit "natural" parser, that turns "every wednesday at 5pm" into "0 17 * * 3", accepted any length of input and went on attempting to parse it, not returning promptly, as expected. The parse call could hold the thread with no end in sight. Fugit dependents that do not check (user) input length for plausability are impacted. PatchesProblem was reported in #104 and the fix was released in fugit 1.11.1 WorkaroundsBy making sure that In fewer words, making sure those fugit methods are not fed unvetted input strings. Referencesgh-104 Affected versions
0.1.0
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
1.0.0
1.1.0
1.1.1
1.1.10
+ 42 more Show less
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.10.0
1.10.1
1.11.0
1.2.0
1.2.1
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.8
1.3.9
1.4.0
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.5.0
1.5.1
1.5.2
1.5.3
1.6.0
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.9.0
Fixed in
1.11.1
References
Updated Aug 07, 2026 · Source: OSV.dev | ||
1.7.2
patch
1 CVE
CVE-2024-43380
GHSA-2m96-52r3-2f3g
Aug 19, 2024
fugit parse and parse_nat stall on lengthy input
Medium
Network
Low
None
ImpactThe fugit "natural" parser, that turns "every wednesday at 5pm" into "0 17 * * 3", accepted any length of input and went on attempting to parse it, not returning promptly, as expected. The parse call could hold the thread with no end in sight. Fugit dependents that do not check (user) input length for plausability are impacted. PatchesProblem was reported in #104 and the fix was released in fugit 1.11.1 WorkaroundsBy making sure that In fewer words, making sure those fugit methods are not fed unvetted input strings. Referencesgh-104 Affected versions
0.1.0
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
1.0.0
1.1.0
1.1.1
1.1.10
+ 42 more Show less
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.10.0
1.10.1
1.11.0
1.2.0
1.2.1
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.8
1.3.9
1.4.0
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.5.0
1.5.1
1.5.2
1.5.3
1.6.0
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.9.0
Fixed in
1.11.1
References
Updated Aug 07, 2026 · Source: OSV.dev | ||
1.7.1
patch
1 CVE
CVE-2024-43380
GHSA-2m96-52r3-2f3g
Aug 19, 2024
fugit parse and parse_nat stall on lengthy input
Medium
Network
Low
None
ImpactThe fugit "natural" parser, that turns "every wednesday at 5pm" into "0 17 * * 3", accepted any length of input and went on attempting to parse it, not returning promptly, as expected. The parse call could hold the thread with no end in sight. Fugit dependents that do not check (user) input length for plausability are impacted. PatchesProblem was reported in #104 and the fix was released in fugit 1.11.1 WorkaroundsBy making sure that In fewer words, making sure those fugit methods are not fed unvetted input strings. Referencesgh-104 Affected versions
0.1.0
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
1.0.0
1.1.0
1.1.1
1.1.10
+ 42 more Show less
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.10.0
1.10.1
1.11.0
1.2.0
1.2.1
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.8
1.3.9
1.4.0
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.5.0
1.5.1
1.5.2
1.5.3
1.6.0
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.9.0
Fixed in
1.11.1
References
Updated Aug 07, 2026 · Source: OSV.dev | ||
1.7.0
minor
1 CVE
CVE-2024-43380
GHSA-2m96-52r3-2f3g
Aug 19, 2024
fugit parse and parse_nat stall on lengthy input
Medium
Network
Low
None
ImpactThe fugit "natural" parser, that turns "every wednesday at 5pm" into "0 17 * * 3", accepted any length of input and went on attempting to parse it, not returning promptly, as expected. The parse call could hold the thread with no end in sight. Fugit dependents that do not check (user) input length for plausability are impacted. PatchesProblem was reported in #104 and the fix was released in fugit 1.11.1 WorkaroundsBy making sure that In fewer words, making sure those fugit methods are not fed unvetted input strings. Referencesgh-104 Affected versions
0.1.0
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
1.0.0
1.1.0
1.1.1
1.1.10
+ 42 more Show less
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.10.0
1.10.1
1.11.0
1.2.0
1.2.1
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.8
1.3.9
1.4.0
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.5.0
1.5.1
1.5.2
1.5.3
1.6.0
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.9.0
Fixed in
1.11.1
References
Updated Aug 07, 2026 · Source: OSV.dev | ||
1.6.0
minor
1 CVE
CVE-2024-43380
GHSA-2m96-52r3-2f3g
Aug 19, 2024
fugit parse and parse_nat stall on lengthy input
Medium
Network
Low
None
ImpactThe fugit "natural" parser, that turns "every wednesday at 5pm" into "0 17 * * 3", accepted any length of input and went on attempting to parse it, not returning promptly, as expected. The parse call could hold the thread with no end in sight. Fugit dependents that do not check (user) input length for plausability are impacted. PatchesProblem was reported in #104 and the fix was released in fugit 1.11.1 WorkaroundsBy making sure that In fewer words, making sure those fugit methods are not fed unvetted input strings. Referencesgh-104 Affected versions
0.1.0
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
1.0.0
1.1.0
1.1.1
1.1.10
+ 42 more Show less
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.10.0
1.10.1
1.11.0
1.2.0
1.2.1
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.8
1.3.9
1.4.0
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.5.0
1.5.1
1.5.2
1.5.3
1.6.0
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.9.0
Fixed in
1.11.1
References
Updated Aug 07, 2026 · Source: OSV.dev | ||
1.5.3
patch
1 CVE
CVE-2024-43380
GHSA-2m96-52r3-2f3g
Aug 19, 2024
fugit parse and parse_nat stall on lengthy input
Medium
Network
Low
None
ImpactThe fugit "natural" parser, that turns "every wednesday at 5pm" into "0 17 * * 3", accepted any length of input and went on attempting to parse it, not returning promptly, as expected. The parse call could hold the thread with no end in sight. Fugit dependents that do not check (user) input length for plausability are impacted. PatchesProblem was reported in #104 and the fix was released in fugit 1.11.1 WorkaroundsBy making sure that In fewer words, making sure those fugit methods are not fed unvetted input strings. Referencesgh-104 Affected versions
0.1.0
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
1.0.0
1.1.0
1.1.1
1.1.10
+ 42 more Show less
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.10.0
1.10.1
1.11.0
1.2.0
1.2.1
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.8
1.3.9
1.4.0
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.5.0
1.5.1
1.5.2
1.5.3
1.6.0
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.9.0
Fixed in
1.11.1
References
Updated Aug 07, 2026 · Source: OSV.dev | ||
1.5.2
patch
1 CVE
CVE-2024-43380
GHSA-2m96-52r3-2f3g
Aug 19, 2024
fugit parse and parse_nat stall on lengthy input
Medium
Network
Low
None
ImpactThe fugit "natural" parser, that turns "every wednesday at 5pm" into "0 17 * * 3", accepted any length of input and went on attempting to parse it, not returning promptly, as expected. The parse call could hold the thread with no end in sight. Fugit dependents that do not check (user) input length for plausability are impacted. PatchesProblem was reported in #104 and the fix was released in fugit 1.11.1 WorkaroundsBy making sure that In fewer words, making sure those fugit methods are not fed unvetted input strings. Referencesgh-104 Affected versions
0.1.0
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
1.0.0
1.1.0
1.1.1
1.1.10
+ 42 more Show less
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.10.0
1.10.1
1.11.0
1.2.0
1.2.1
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.8
1.3.9
1.4.0
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.5.0
1.5.1
1.5.2
1.5.3
1.6.0
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.9.0
Fixed in
1.11.1
References
Updated Aug 07, 2026 · Source: OSV.dev | ||
1.5.1
patch
1 CVE
CVE-2024-43380
GHSA-2m96-52r3-2f3g
Aug 19, 2024
fugit parse and parse_nat stall on lengthy input
Medium
Network
Low
None
ImpactThe fugit "natural" parser, that turns "every wednesday at 5pm" into "0 17 * * 3", accepted any length of input and went on attempting to parse it, not returning promptly, as expected. The parse call could hold the thread with no end in sight. Fugit dependents that do not check (user) input length for plausability are impacted. PatchesProblem was reported in #104 and the fix was released in fugit 1.11.1 WorkaroundsBy making sure that In fewer words, making sure those fugit methods are not fed unvetted input strings. Referencesgh-104 Affected versions
0.1.0
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
1.0.0
1.1.0
1.1.1
1.1.10
+ 42 more Show less
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.10.0
1.10.1
1.11.0
1.2.0
1.2.1
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.8
1.3.9
1.4.0
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.5.0
1.5.1
1.5.2
1.5.3
1.6.0
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.9.0
Fixed in
1.11.1
References
Updated Aug 07, 2026 · Source: OSV.dev | ||
1.5.0
minor
1 CVE
CVE-2024-43380
GHSA-2m96-52r3-2f3g
Aug 19, 2024
fugit parse and parse_nat stall on lengthy input
Medium
Network
Low
None
ImpactThe fugit "natural" parser, that turns "every wednesday at 5pm" into "0 17 * * 3", accepted any length of input and went on attempting to parse it, not returning promptly, as expected. The parse call could hold the thread with no end in sight. Fugit dependents that do not check (user) input length for plausability are impacted. PatchesProblem was reported in #104 and the fix was released in fugit 1.11.1 WorkaroundsBy making sure that In fewer words, making sure those fugit methods are not fed unvetted input strings. Referencesgh-104 Affected versions
0.1.0
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
1.0.0
1.1.0
1.1.1
1.1.10
+ 42 more Show less
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.10.0
1.10.1
1.11.0
1.2.0
1.2.1
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.8
1.3.9
1.4.0
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.5.0
1.5.1
1.5.2
1.5.3
1.6.0
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.9.0
Fixed in
1.11.1
References
Updated Aug 07, 2026 · Source: OSV.dev | ||
1.4.5
patch
1 CVE
CVE-2024-43380
GHSA-2m96-52r3-2f3g
Aug 19, 2024
fugit parse and parse_nat stall on lengthy input
Medium
Network
Low
None
ImpactThe fugit "natural" parser, that turns "every wednesday at 5pm" into "0 17 * * 3", accepted any length of input and went on attempting to parse it, not returning promptly, as expected. The parse call could hold the thread with no end in sight. Fugit dependents that do not check (user) input length for plausability are impacted. PatchesProblem was reported in #104 and the fix was released in fugit 1.11.1 WorkaroundsBy making sure that In fewer words, making sure those fugit methods are not fed unvetted input strings. Referencesgh-104 Affected versions
0.1.0
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
1.0.0
1.1.0
1.1.1
1.1.10
+ 42 more Show less
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.10.0
1.10.1
1.11.0
1.2.0
1.2.1
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.8
1.3.9
1.4.0
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.5.0
1.5.1
1.5.2
1.5.3
1.6.0
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.9.0
Fixed in
1.11.1
References
Updated Aug 07, 2026 · Source: OSV.dev | ||
1.4.4
patch
1 CVE
CVE-2024-43380
GHSA-2m96-52r3-2f3g
Aug 19, 2024
fugit parse and parse_nat stall on lengthy input
Medium
Network
Low
None
ImpactThe fugit "natural" parser, that turns "every wednesday at 5pm" into "0 17 * * 3", accepted any length of input and went on attempting to parse it, not returning promptly, as expected. The parse call could hold the thread with no end in sight. Fugit dependents that do not check (user) input length for plausability are impacted. PatchesProblem was reported in #104 and the fix was released in fugit 1.11.1 WorkaroundsBy making sure that In fewer words, making sure those fugit methods are not fed unvetted input strings. Referencesgh-104 Affected versions
0.1.0
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
1.0.0
1.1.0
1.1.1
1.1.10
+ 42 more Show less
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.10.0
1.10.1
1.11.0
1.2.0
1.2.1
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.8
1.3.9
1.4.0
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.5.0
1.5.1
1.5.2
1.5.3
1.6.0
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.9.0
Fixed in
1.11.1
References
Updated Aug 07, 2026 · Source: OSV.dev | ||
1.4.3
patch
1 CVE
CVE-2024-43380
GHSA-2m96-52r3-2f3g
Aug 19, 2024
fugit parse and parse_nat stall on lengthy input
Medium
Network
Low
None
ImpactThe fugit "natural" parser, that turns "every wednesday at 5pm" into "0 17 * * 3", accepted any length of input and went on attempting to parse it, not returning promptly, as expected. The parse call could hold the thread with no end in sight. Fugit dependents that do not check (user) input length for plausability are impacted. PatchesProblem was reported in #104 and the fix was released in fugit 1.11.1 WorkaroundsBy making sure that In fewer words, making sure those fugit methods are not fed unvetted input strings. Referencesgh-104 Affected versions
0.1.0
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
1.0.0
1.1.0
1.1.1
1.1.10
+ 42 more Show less
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.10.0
1.10.1
1.11.0
1.2.0
1.2.1
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.8
1.3.9
1.4.0
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.5.0
1.5.1
1.5.2
1.5.3
1.6.0
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.9.0
Fixed in
1.11.1
References
Updated Aug 07, 2026 · Source: OSV.dev | ||
1.4.2
patch
1 CVE
CVE-2024-43380
GHSA-2m96-52r3-2f3g
Aug 19, 2024
fugit parse and parse_nat stall on lengthy input
Medium
Network
Low
None
ImpactThe fugit "natural" parser, that turns "every wednesday at 5pm" into "0 17 * * 3", accepted any length of input and went on attempting to parse it, not returning promptly, as expected. The parse call could hold the thread with no end in sight. Fugit dependents that do not check (user) input length for plausability are impacted. PatchesProblem was reported in #104 and the fix was released in fugit 1.11.1 WorkaroundsBy making sure that In fewer words, making sure those fugit methods are not fed unvetted input strings. Referencesgh-104 Affected versions
0.1.0
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
1.0.0
1.1.0
1.1.1
1.1.10
+ 42 more Show less
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.10.0
1.10.1
1.11.0
1.2.0
1.2.1
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.8
1.3.9
1.4.0
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.5.0
1.5.1
1.5.2
1.5.3
1.6.0
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.9.0
Fixed in
1.11.1
References
Updated Aug 07, 2026 · Source: OSV.dev | ||
1.4.1
patch
1 CVE
CVE-2024-43380
GHSA-2m96-52r3-2f3g
Aug 19, 2024
fugit parse and parse_nat stall on lengthy input
Medium
Network
Low
None
ImpactThe fugit "natural" parser, that turns "every wednesday at 5pm" into "0 17 * * 3", accepted any length of input and went on attempting to parse it, not returning promptly, as expected. The parse call could hold the thread with no end in sight. Fugit dependents that do not check (user) input length for plausability are impacted. PatchesProblem was reported in #104 and the fix was released in fugit 1.11.1 WorkaroundsBy making sure that In fewer words, making sure those fugit methods are not fed unvetted input strings. Referencesgh-104 Affected versions
0.1.0
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
1.0.0
1.1.0
1.1.1
1.1.10
+ 42 more Show less
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.10.0
1.10.1
1.11.0
1.2.0
1.2.1
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.8
1.3.9
1.4.0
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.5.0
1.5.1
1.5.2
1.5.3
1.6.0
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.9.0
Fixed in
1.11.1
References
Updated Aug 07, 2026 · Source: OSV.dev | ||
1.4.0
minor
1 CVE
CVE-2024-43380
GHSA-2m96-52r3-2f3g
Aug 19, 2024
fugit parse and parse_nat stall on lengthy input
Medium
Network
Low
None
ImpactThe fugit "natural" parser, that turns "every wednesday at 5pm" into "0 17 * * 3", accepted any length of input and went on attempting to parse it, not returning promptly, as expected. The parse call could hold the thread with no end in sight. Fugit dependents that do not check (user) input length for plausability are impacted. PatchesProblem was reported in #104 and the fix was released in fugit 1.11.1 WorkaroundsBy making sure that In fewer words, making sure those fugit methods are not fed unvetted input strings. Referencesgh-104 Affected versions
0.1.0
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
1.0.0
1.1.0
1.1.1
1.1.10
+ 42 more Show less
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.10.0
1.10.1
1.11.0
1.2.0
1.2.1
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.8
1.3.9
1.4.0
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.5.0
1.5.1
1.5.2
1.5.3
1.6.0
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.9.0
Fixed in
1.11.1
References
Updated Aug 07, 2026 · Source: OSV.dev | ||
1.3.9
patch
1 CVE
CVE-2024-43380
GHSA-2m96-52r3-2f3g
Aug 19, 2024
fugit parse and parse_nat stall on lengthy input
Medium
Network
Low
None
ImpactThe fugit "natural" parser, that turns "every wednesday at 5pm" into "0 17 * * 3", accepted any length of input and went on attempting to parse it, not returning promptly, as expected. The parse call could hold the thread with no end in sight. Fugit dependents that do not check (user) input length for plausability are impacted. PatchesProblem was reported in #104 and the fix was released in fugit 1.11.1 WorkaroundsBy making sure that In fewer words, making sure those fugit methods are not fed unvetted input strings. Referencesgh-104 Affected versions
0.1.0
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
1.0.0
1.1.0
1.1.1
1.1.10
+ 42 more Show less
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.10.0
1.10.1
1.11.0
1.2.0
1.2.1
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.8
1.3.9
1.4.0
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.5.0
1.5.1
1.5.2
1.5.3
1.6.0
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.9.0
Fixed in
1.11.1
References
Updated Aug 07, 2026 · Source: OSV.dev | ||
1.3.8
patch
1 CVE
CVE-2024-43380
GHSA-2m96-52r3-2f3g
Aug 19, 2024
fugit parse and parse_nat stall on lengthy input
Medium
Network
Low
None
ImpactThe fugit "natural" parser, that turns "every wednesday at 5pm" into "0 17 * * 3", accepted any length of input and went on attempting to parse it, not returning promptly, as expected. The parse call could hold the thread with no end in sight. Fugit dependents that do not check (user) input length for plausability are impacted. PatchesProblem was reported in #104 and the fix was released in fugit 1.11.1 WorkaroundsBy making sure that In fewer words, making sure those fugit methods are not fed unvetted input strings. Referencesgh-104 Affected versions
0.1.0
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
1.0.0
1.1.0
1.1.1
1.1.10
+ 42 more Show less
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.10.0
1.10.1
1.11.0
1.2.0
1.2.1
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.8
1.3.9
1.4.0
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.5.0
1.5.1
1.5.2
1.5.3
1.6.0
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.9.0
Fixed in
1.11.1
References
Updated Aug 07, 2026 · Source: OSV.dev | ||
1.3.7
patch
1 CVE
CVE-2024-43380
GHSA-2m96-52r3-2f3g
Aug 19, 2024
fugit parse and parse_nat stall on lengthy input
Medium
Network
Low
None
ImpactThe fugit "natural" parser, that turns "every wednesday at 5pm" into "0 17 * * 3", accepted any length of input and went on attempting to parse it, not returning promptly, as expected. The parse call could hold the thread with no end in sight. Fugit dependents that do not check (user) input length for plausability are impacted. PatchesProblem was reported in #104 and the fix was released in fugit 1.11.1 WorkaroundsBy making sure that In fewer words, making sure those fugit methods are not fed unvetted input strings. Referencesgh-104 Affected versions
0.1.0
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
1.0.0
1.1.0
1.1.1
1.1.10
+ 42 more Show less
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.10.0
1.10.1
1.11.0
1.2.0
1.2.1
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.8
1.3.9
1.4.0
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.5.0
1.5.1
1.5.2
1.5.3
1.6.0
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.9.0
Fixed in
1.11.1
References
Updated Aug 07, 2026 · Source: OSV.dev | ||
1.3.6
patch
1 CVE
CVE-2024-43380
GHSA-2m96-52r3-2f3g
Aug 19, 2024
fugit parse and parse_nat stall on lengthy input
Medium
Network
Low
None
ImpactThe fugit "natural" parser, that turns "every wednesday at 5pm" into "0 17 * * 3", accepted any length of input and went on attempting to parse it, not returning promptly, as expected. The parse call could hold the thread with no end in sight. Fugit dependents that do not check (user) input length for plausability are impacted. PatchesProblem was reported in #104 and the fix was released in fugit 1.11.1 WorkaroundsBy making sure that In fewer words, making sure those fugit methods are not fed unvetted input strings. Referencesgh-104 Affected versions
0.1.0
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
1.0.0
1.1.0
1.1.1
1.1.10
+ 42 more Show less
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.10.0
1.10.1
1.11.0
1.2.0
1.2.1
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.8
1.3.9
1.4.0
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.5.0
1.5.1
1.5.2
1.5.3
1.6.0
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.9.0
Fixed in
1.11.1
References
Updated Aug 07, 2026 · Source: OSV.dev | ||
1.3.5
patch
1 CVE
CVE-2024-43380
GHSA-2m96-52r3-2f3g
Aug 19, 2024
fugit parse and parse_nat stall on lengthy input
Medium
Network
Low
None
ImpactThe fugit "natural" parser, that turns "every wednesday at 5pm" into "0 17 * * 3", accepted any length of input and went on attempting to parse it, not returning promptly, as expected. The parse call could hold the thread with no end in sight. Fugit dependents that do not check (user) input length for plausability are impacted. PatchesProblem was reported in #104 and the fix was released in fugit 1.11.1 WorkaroundsBy making sure that In fewer words, making sure those fugit methods are not fed unvetted input strings. Referencesgh-104 Affected versions
0.1.0
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
1.0.0
1.1.0
1.1.1
1.1.10
+ 42 more Show less
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.10.0
1.10.1
1.11.0
1.2.0
1.2.1
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.8
1.3.9
1.4.0
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.5.0
1.5.1
1.5.2
1.5.3
1.6.0
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.9.0
Fixed in
1.11.1
References
Updated Aug 07, 2026 · Source: OSV.dev | ||
1.3.4
patch
1 CVE
CVE-2024-43380
GHSA-2m96-52r3-2f3g
Aug 19, 2024
fugit parse and parse_nat stall on lengthy input
Medium
Network
Low
None
ImpactThe fugit "natural" parser, that turns "every wednesday at 5pm" into "0 17 * * 3", accepted any length of input and went on attempting to parse it, not returning promptly, as expected. The parse call could hold the thread with no end in sight. Fugit dependents that do not check (user) input length for plausability are impacted. PatchesProblem was reported in #104 and the fix was released in fugit 1.11.1 WorkaroundsBy making sure that In fewer words, making sure those fugit methods are not fed unvetted input strings. Referencesgh-104 Affected versions
0.1.0
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
1.0.0
1.1.0
1.1.1
1.1.10
+ 42 more Show less
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.10.0
1.10.1
1.11.0
1.2.0
1.2.1
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.8
1.3.9
1.4.0
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.5.0
1.5.1
1.5.2
1.5.3
1.6.0
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.9.0
Fixed in
1.11.1
References
Updated Aug 07, 2026 · Source: OSV.dev | ||
1.3.3
patch
1 CVE
CVE-2024-43380
GHSA-2m96-52r3-2f3g
Aug 19, 2024
fugit parse and parse_nat stall on lengthy input
Medium
Network
Low
None
ImpactThe fugit "natural" parser, that turns "every wednesday at 5pm" into "0 17 * * 3", accepted any length of input and went on attempting to parse it, not returning promptly, as expected. The parse call could hold the thread with no end in sight. Fugit dependents that do not check (user) input length for plausability are impacted. PatchesProblem was reported in #104 and the fix was released in fugit 1.11.1 WorkaroundsBy making sure that In fewer words, making sure those fugit methods are not fed unvetted input strings. Referencesgh-104 Affected versions
0.1.0
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
1.0.0
1.1.0
1.1.1
1.1.10
+ 42 more Show less
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.10.0
1.10.1
1.11.0
1.2.0
1.2.1
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.8
1.3.9
1.4.0
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.5.0
1.5.1
1.5.2
1.5.3
1.6.0
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.9.0
Fixed in
1.11.1
References
Updated Aug 07, 2026 · Source: OSV.dev | ||
1.3.2
patch
1 CVE
CVE-2024-43380
GHSA-2m96-52r3-2f3g
Aug 19, 2024
fugit parse and parse_nat stall on lengthy input
Medium
Network
Low
None
ImpactThe fugit "natural" parser, that turns "every wednesday at 5pm" into "0 17 * * 3", accepted any length of input and went on attempting to parse it, not returning promptly, as expected. The parse call could hold the thread with no end in sight. Fugit dependents that do not check (user) input length for plausability are impacted. PatchesProblem was reported in #104 and the fix was released in fugit 1.11.1 WorkaroundsBy making sure that In fewer words, making sure those fugit methods are not fed unvetted input strings. Referencesgh-104 Affected versions
0.1.0
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
1.0.0
1.1.0
1.1.1
1.1.10
+ 42 more Show less
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.10.0
1.10.1
1.11.0
1.2.0
1.2.1
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.8
1.3.9
1.4.0
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.5.0
1.5.1
1.5.2
1.5.3
1.6.0
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.9.0
Fixed in
1.11.1
References
Updated Aug 07, 2026 · Source: OSV.dev | ||
1.3.1
patch
1 CVE
CVE-2024-43380
GHSA-2m96-52r3-2f3g
Aug 19, 2024
fugit parse and parse_nat stall on lengthy input
Medium
Network
Low
None
ImpactThe fugit "natural" parser, that turns "every wednesday at 5pm" into "0 17 * * 3", accepted any length of input and went on attempting to parse it, not returning promptly, as expected. The parse call could hold the thread with no end in sight. Fugit dependents that do not check (user) input length for plausability are impacted. PatchesProblem was reported in #104 and the fix was released in fugit 1.11.1 WorkaroundsBy making sure that In fewer words, making sure those fugit methods are not fed unvetted input strings. Referencesgh-104 Affected versions
0.1.0
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
1.0.0
1.1.0
1.1.1
1.1.10
+ 42 more Show less
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.10.0
1.10.1
1.11.0
1.2.0
1.2.1
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.8
1.3.9
1.4.0
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.5.0
1.5.1
1.5.2
1.5.3
1.6.0
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.9.0
Fixed in
1.11.1
References
Updated Aug 07, 2026 · Source: OSV.dev | ||
1.3.0
minor
1 CVE
CVE-2024-43380
GHSA-2m96-52r3-2f3g
Aug 19, 2024
fugit parse and parse_nat stall on lengthy input
Medium
Network
Low
None
ImpactThe fugit "natural" parser, that turns "every wednesday at 5pm" into "0 17 * * 3", accepted any length of input and went on attempting to parse it, not returning promptly, as expected. The parse call could hold the thread with no end in sight. Fugit dependents that do not check (user) input length for plausability are impacted. PatchesProblem was reported in #104 and the fix was released in fugit 1.11.1 WorkaroundsBy making sure that In fewer words, making sure those fugit methods are not fed unvetted input strings. Referencesgh-104 Affected versions
0.1.0
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
1.0.0
1.1.0
1.1.1
1.1.10
+ 42 more Show less
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.10.0
1.10.1
1.11.0
1.2.0
1.2.1
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.8
1.3.9
1.4.0
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.5.0
1.5.1
1.5.2
1.5.3
1.6.0
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.9.0
Fixed in
1.11.1
References
Updated Aug 07, 2026 · Source: OSV.dev | ||
1.2.3
patch
1 CVE
CVE-2024-43380
GHSA-2m96-52r3-2f3g
Aug 19, 2024
fugit parse and parse_nat stall on lengthy input
Medium
Network
Low
None
ImpactThe fugit "natural" parser, that turns "every wednesday at 5pm" into "0 17 * * 3", accepted any length of input and went on attempting to parse it, not returning promptly, as expected. The parse call could hold the thread with no end in sight. Fugit dependents that do not check (user) input length for plausability are impacted. PatchesProblem was reported in #104 and the fix was released in fugit 1.11.1 WorkaroundsBy making sure that In fewer words, making sure those fugit methods are not fed unvetted input strings. Referencesgh-104 Affected versions
0.1.0
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
1.0.0
1.1.0
1.1.1
1.1.10
+ 42 more Show less
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.10.0
1.10.1
1.11.0
1.2.0
1.2.1
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.8
1.3.9
1.4.0
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.5.0
1.5.1
1.5.2
1.5.3
1.6.0
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.9.0
Fixed in
1.11.1
References
Updated Aug 07, 2026 · Source: OSV.dev | ||
1.2.2
patch
1 CVE
CVE-2024-43380
GHSA-2m96-52r3-2f3g
Aug 19, 2024
fugit parse and parse_nat stall on lengthy input
Medium
Network
Low
None
ImpactThe fugit "natural" parser, that turns "every wednesday at 5pm" into "0 17 * * 3", accepted any length of input and went on attempting to parse it, not returning promptly, as expected. The parse call could hold the thread with no end in sight. Fugit dependents that do not check (user) input length for plausability are impacted. PatchesProblem was reported in #104 and the fix was released in fugit 1.11.1 WorkaroundsBy making sure that In fewer words, making sure those fugit methods are not fed unvetted input strings. Referencesgh-104 Affected versions
0.1.0
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
1.0.0
1.1.0
1.1.1
1.1.10
+ 42 more Show less
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.10.0
1.10.1
1.11.0
1.2.0
1.2.1
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.8
1.3.9
1.4.0
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.5.0
1.5.1
1.5.2
1.5.3
1.6.0
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.9.0
Fixed in
1.11.1
References
Updated Aug 07, 2026 · Source: OSV.dev | ||
1.2.1
patch
1 CVE
CVE-2024-43380
GHSA-2m96-52r3-2f3g
Aug 19, 2024
fugit parse and parse_nat stall on lengthy input
Medium
Network
Low
None
ImpactThe fugit "natural" parser, that turns "every wednesday at 5pm" into "0 17 * * 3", accepted any length of input and went on attempting to parse it, not returning promptly, as expected. The parse call could hold the thread with no end in sight. Fugit dependents that do not check (user) input length for plausability are impacted. PatchesProblem was reported in #104 and the fix was released in fugit 1.11.1 WorkaroundsBy making sure that In fewer words, making sure those fugit methods are not fed unvetted input strings. Referencesgh-104 Affected versions
0.1.0
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
1.0.0
1.1.0
1.1.1
1.1.10
+ 42 more Show less
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.10.0
1.10.1
1.11.0
1.2.0
1.2.1
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.8
1.3.9
1.4.0
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.5.0
1.5.1
1.5.2
1.5.3
1.6.0
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.9.0
Fixed in
1.11.1
References
Updated Aug 07, 2026 · Source: OSV.dev | ||
1.2.0
minor
1 CVE
CVE-2024-43380
GHSA-2m96-52r3-2f3g
Aug 19, 2024
fugit parse and parse_nat stall on lengthy input
Medium
Network
Low
None
ImpactThe fugit "natural" parser, that turns "every wednesday at 5pm" into "0 17 * * 3", accepted any length of input and went on attempting to parse it, not returning promptly, as expected. The parse call could hold the thread with no end in sight. Fugit dependents that do not check (user) input length for plausability are impacted. PatchesProblem was reported in #104 and the fix was released in fugit 1.11.1 WorkaroundsBy making sure that In fewer words, making sure those fugit methods are not fed unvetted input strings. Referencesgh-104 Affected versions
0.1.0
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
1.0.0
1.1.0
1.1.1
1.1.10
+ 42 more Show less
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.10.0
1.10.1
1.11.0
1.2.0
1.2.1
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.8
1.3.9
1.4.0
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.5.0
1.5.1
1.5.2
1.5.3
1.6.0
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.9.0
Fixed in
1.11.1
References
Updated Aug 07, 2026 · Source: OSV.dev | ||
1.1.10
patch
1 CVE
CVE-2024-43380
GHSA-2m96-52r3-2f3g
Aug 19, 2024
fugit parse and parse_nat stall on lengthy input
Medium
Network
Low
None
ImpactThe fugit "natural" parser, that turns "every wednesday at 5pm" into "0 17 * * 3", accepted any length of input and went on attempting to parse it, not returning promptly, as expected. The parse call could hold the thread with no end in sight. Fugit dependents that do not check (user) input length for plausability are impacted. PatchesProblem was reported in #104 and the fix was released in fugit 1.11.1 WorkaroundsBy making sure that In fewer words, making sure those fugit methods are not fed unvetted input strings. Referencesgh-104 Affected versions
0.1.0
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
1.0.0
1.1.0
1.1.1
1.1.10
+ 42 more Show less
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.10.0
1.10.1
1.11.0
1.2.0
1.2.1
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.8
1.3.9
1.4.0
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.5.0
1.5.1
1.5.2
1.5.3
1.6.0
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.9.0
Fixed in
1.11.1
References
Updated Aug 07, 2026 · Source: OSV.dev | ||
1.1.9
patch
1 CVE
CVE-2024-43380
GHSA-2m96-52r3-2f3g
Aug 19, 2024
fugit parse and parse_nat stall on lengthy input
Medium
Network
Low
None
ImpactThe fugit "natural" parser, that turns "every wednesday at 5pm" into "0 17 * * 3", accepted any length of input and went on attempting to parse it, not returning promptly, as expected. The parse call could hold the thread with no end in sight. Fugit dependents that do not check (user) input length for plausability are impacted. PatchesProblem was reported in #104 and the fix was released in fugit 1.11.1 WorkaroundsBy making sure that In fewer words, making sure those fugit methods are not fed unvetted input strings. Referencesgh-104 Affected versions
0.1.0
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
1.0.0
1.1.0
1.1.1
1.1.10
+ 42 more Show less
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.10.0
1.10.1
1.11.0
1.2.0
1.2.1
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.8
1.3.9
1.4.0
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.5.0
1.5.1
1.5.2
1.5.3
1.6.0
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.9.0
Fixed in
1.11.1
References
Updated Aug 07, 2026 · Source: OSV.dev | ||
1.1.8
patch
1 CVE
CVE-2024-43380
GHSA-2m96-52r3-2f3g
Aug 19, 2024
fugit parse and parse_nat stall on lengthy input
Medium
Network
Low
None
ImpactThe fugit "natural" parser, that turns "every wednesday at 5pm" into "0 17 * * 3", accepted any length of input and went on attempting to parse it, not returning promptly, as expected. The parse call could hold the thread with no end in sight. Fugit dependents that do not check (user) input length for plausability are impacted. PatchesProblem was reported in #104 and the fix was released in fugit 1.11.1 WorkaroundsBy making sure that In fewer words, making sure those fugit methods are not fed unvetted input strings. Referencesgh-104 Affected versions
0.1.0
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
1.0.0
1.1.0
1.1.1
1.1.10
+ 42 more Show less
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.10.0
1.10.1
1.11.0
1.2.0
1.2.1
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.8
1.3.9
1.4.0
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.5.0
1.5.1
1.5.2
1.5.3
1.6.0
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.9.0
Fixed in
1.11.1
References
Updated Aug 07, 2026 · Source: OSV.dev | ||
1.1.7
patch
1 CVE
CVE-2024-43380
GHSA-2m96-52r3-2f3g
Aug 19, 2024
fugit parse and parse_nat stall on lengthy input
Medium
Network
Low
None
ImpactThe fugit "natural" parser, that turns "every wednesday at 5pm" into "0 17 * * 3", accepted any length of input and went on attempting to parse it, not returning promptly, as expected. The parse call could hold the thread with no end in sight. Fugit dependents that do not check (user) input length for plausability are impacted. PatchesProblem was reported in #104 and the fix was released in fugit 1.11.1 WorkaroundsBy making sure that In fewer words, making sure those fugit methods are not fed unvetted input strings. Referencesgh-104 Affected versions
0.1.0
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
1.0.0
1.1.0
1.1.1
1.1.10
+ 42 more Show less
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.10.0
1.10.1
1.11.0
1.2.0
1.2.1
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.8
1.3.9
1.4.0
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.5.0
1.5.1
1.5.2
1.5.3
1.6.0
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.9.0
Fixed in
1.11.1
References
Updated Aug 07, 2026 · Source: OSV.dev | ||
1.1.6
patch
1 CVE
CVE-2024-43380
GHSA-2m96-52r3-2f3g
Aug 19, 2024
fugit parse and parse_nat stall on lengthy input
Medium
Network
Low
None
ImpactThe fugit "natural" parser, that turns "every wednesday at 5pm" into "0 17 * * 3", accepted any length of input and went on attempting to parse it, not returning promptly, as expected. The parse call could hold the thread with no end in sight. Fugit dependents that do not check (user) input length for plausability are impacted. PatchesProblem was reported in #104 and the fix was released in fugit 1.11.1 WorkaroundsBy making sure that In fewer words, making sure those fugit methods are not fed unvetted input strings. Referencesgh-104 Affected versions
0.1.0
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
1.0.0
1.1.0
1.1.1
1.1.10
+ 42 more Show less
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.10.0
1.10.1
1.11.0
1.2.0
1.2.1
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.8
1.3.9
1.4.0
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.5.0
1.5.1
1.5.2
1.5.3
1.6.0
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.9.0
Fixed in
1.11.1
References
Updated Aug 07, 2026 · Source: OSV.dev | ||
1.1.5
patch
1 CVE
CVE-2024-43380
GHSA-2m96-52r3-2f3g
Aug 19, 2024
fugit parse and parse_nat stall on lengthy input
Medium
Network
Low
None
ImpactThe fugit "natural" parser, that turns "every wednesday at 5pm" into "0 17 * * 3", accepted any length of input and went on attempting to parse it, not returning promptly, as expected. The parse call could hold the thread with no end in sight. Fugit dependents that do not check (user) input length for plausability are impacted. PatchesProblem was reported in #104 and the fix was released in fugit 1.11.1 WorkaroundsBy making sure that In fewer words, making sure those fugit methods are not fed unvetted input strings. Referencesgh-104 Affected versions
0.1.0
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
1.0.0
1.1.0
1.1.1
1.1.10
+ 42 more Show less
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.10.0
1.10.1
1.11.0
1.2.0
1.2.1
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.8
1.3.9
1.4.0
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.5.0
1.5.1
1.5.2
1.5.3
1.6.0
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.9.0
Fixed in
1.11.1
References
Updated Aug 07, 2026 · Source: OSV.dev | ||
1.1.4
patch
1 CVE
CVE-2024-43380
GHSA-2m96-52r3-2f3g
Aug 19, 2024
fugit parse and parse_nat stall on lengthy input
Medium
Network
Low
None
ImpactThe fugit "natural" parser, that turns "every wednesday at 5pm" into "0 17 * * 3", accepted any length of input and went on attempting to parse it, not returning promptly, as expected. The parse call could hold the thread with no end in sight. Fugit dependents that do not check (user) input length for plausability are impacted. PatchesProblem was reported in #104 and the fix was released in fugit 1.11.1 WorkaroundsBy making sure that In fewer words, making sure those fugit methods are not fed unvetted input strings. Referencesgh-104 Affected versions
0.1.0
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
1.0.0
1.1.0
1.1.1
1.1.10
+ 42 more Show less
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.10.0
1.10.1
1.11.0
1.2.0
1.2.1
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.8
1.3.9
1.4.0
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.5.0
1.5.1
1.5.2
1.5.3
1.6.0
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.9.0
Fixed in
1.11.1
References
Updated Aug 07, 2026 · Source: OSV.dev | ||
1.1.3
patch
1 CVE
CVE-2024-43380
GHSA-2m96-52r3-2f3g
Aug 19, 2024
fugit parse and parse_nat stall on lengthy input
Medium
Network
Low
None
ImpactThe fugit "natural" parser, that turns "every wednesday at 5pm" into "0 17 * * 3", accepted any length of input and went on attempting to parse it, not returning promptly, as expected. The parse call could hold the thread with no end in sight. Fugit dependents that do not check (user) input length for plausability are impacted. PatchesProblem was reported in #104 and the fix was released in fugit 1.11.1 WorkaroundsBy making sure that In fewer words, making sure those fugit methods are not fed unvetted input strings. Referencesgh-104 Affected versions
0.1.0
0.9.0
0.9.1
0.9.2
0.9.3
0.9.4
0.9.5
0.9.6
1.0.0
1.1.0
1.1.1
1.1.10
+ 42 more Show less
1.1.2
1.1.3
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.10.0
1.10.1
1.11.0
1.2.0
1.2.1
1.2.2
1.2.3
1.3.0
1.3.1
1.3.2
1.3.3
1.3.4
1.3.5
1.3.6
1.3.7
1.3.8
1.3.9
1.4.0
1.4.1
1.4.2
1.4.3
1.4.4
1.4.5
1.5.0
1.5.1
1.5.2
1.5.3
1.6.0
1.7.0
1.7.1
1.7.2
1.8.0
1.8.1
1.9.0
Fixed in
1.11.1
References
Updated Aug 07, 2026 · Source: OSV.dev |