{"action":"Upgrade time to 0.3.47 or later.","affected":[{"fixed":"0.3.47","introduced":"0.3.6"}],"component":"time","cve_ids":["CVE-2026-25727"],"ecosystem":"crates.io","epss":0.00339,"exploited":false,"fixed_versions":["0.3.47"],"ghsa_id":"GHSA-r6v5-fh4h-64xc","id":"tcs_01M5KFAQX54W8EHJBEECYPRM71","modified_at":"2026-02-06T09:17:04.230802Z","published_at":"2026-02-05T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2026-0009","https://crates.io/crates/time","https://rustsec.org/advisories/RUSTSEC-2026-0009.html","https://github.com/time-rs/time/blob/main/CHANGELOG.md#0347-2026-02-05"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"RUSTSEC-2026-0009","url":"https://osv.dev/vulnerability/RUSTSEC-2026-0009"}],"summary":"Denial of Service via Stack Exhaustion"}