{"action":"Upgrade time to 0.3.47 or later.","affected":[{"fixed":"0.3.47","introduced":"0.3.6"}],"component":"time","cve_ids":["CVE-2026-25727"],"ecosystem":"crates.io","epss":0.00339,"exploited":false,"fixed_versions":["0.3.47"],"ghsa_id":"GHSA-r6v5-fh4h-64xc","id":"tcs_01M5KF2Z7BT8DN8J5HB3JKQ56E","modified_at":"2026-09-10T03:50:35.583241382Z","published_at":"2026-02-05T17:57:55Z","references":["https://osv.dev/vulnerability/GHSA-r6v5-fh4h-64xc","https://github.com/time-rs/time/security/advisories/GHSA-r6v5-fh4h-64xc","https://nvd.nist.gov/vuln/detail/CVE-2026-25727","https://github.com/time-rs/time/commit/1c63dc7985b8fa26bd8c689423cc56b7a03841ee","https://github.com/time-rs/time","https://github.com/time-rs/time/blob/main/CHANGELOG.md#0347-2026-02-05","https://github.com/time-rs/time/releases/tag/v0.3.47","https://rustsec.org/advisories/RUSTSEC-2026-0009.html"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-r6v5-fh4h-64xc","url":"https://osv.dev/vulnerability/GHSA-r6v5-fh4h-64xc"},{"source":"nvd","source_id":"CVE-2026-25727","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-25727"}],"summary":"time vulnerable to stack exhaustion Denial of Service attack"}