GHSA-qpgv-g792-wh6x
Uncontrolled Resource Consumption in parse_duration
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| crates.io | parse_duration | <= 2.1.1 | no fix listed |
Details
As written in the advisory (Markdown source, shown as plain text).
An issue was discovered in the parse_duration crate through 2021-03-18 for Rust. It allows attackers to cause a denial of service (CPU and memory consumption) via a duration string with a large exponent.
References
External links from the advisory. They lead to third-party sites.