CVE-2026-25727
Medium · 6.5CVSS
6.5
EPSS
0.3%
Published
Feb 6, 2026
CISA due date
—
The record
time provides date and time handling in Rust. From 0.3.6 to before 0.3.47, when user-provided input is provided to any type that parses with the RFC 2822 format, a denial of service attack via stack exhaustion is possible. The attack relies on formally deprecated and rarely-used features that are part of the RFC 2822 format used in a malicious manner. Ordinary, non-malicious input will never encounter this scenario. A limit to the depth of recursion was added in v0.3.47. From this version, an error will be returned rather than exhausting the stack.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| crates.io | time | 0.3.6 | 0.3.47 |
| Chainguard | atuin | 0 | 18.11.0-r2 |
| Chainguard | bat | 0 | 0.26.1-r3 |
| Chainguard | berg | 0 | 0.5.5-r0 |
| Chainguard | buck2 | 0 | 20260201-r1 |
| Chainguard | cargo-audit | 0 | 0.22.1-r1 |
| Chainguard | cargo-c | 0 | 0.10.20-r3 |
| Chainguard | cedar | 0 | 4.8.2-r3 |
| Chainguard | deno | 0 | 2.6.8-r2 |
| Chainguard | eza | 0 | 0.23.4-r3 |
| Chainguard | fnm | 0 | 1.38.1-r9 |
| Chainguard | geckodriver | 0 | 0.36.0-r5 |
| Chainguard | guestproxyagent | 0 | 1.0.40-r0 |
| Chainguard | jujutsu | 0 | 0.38.0-r1 |
| Chainguard | kdash | 0 | 0.6.2-r11 |
| Chainguard | komodo-cli | 0 | 1.19.5-r3 |
| Chainguard | komodo-core | 0 | 1.19.5-r3 |
| Chainguard | komodo-periphery | 0 | 1.19.5-r3 |
| Chainguard | libquiche | 0 | 0.25.0-r0 |
| Chainguard | linkerd2-proxy | 0 | 2.338.0-r3 |
| Chainguard | lychee | 0 | 0.22.0-r5 |
| Chainguard | mountpoint-s3 | 0 | 1.22.0-r3 |
| Chainguard | nushell | 0 | 0.110.0-r2 |
| Chainguard | nushell-plugins | 0 | 0.110.0-r2 |
| Chainguard | oranda | 0 | 0.6.5-r14 |
| Chainguard | parseable | 0 | 2.5.11-r0 |
| Chainguard | pixi | 0 | 0.63.2-r3 |
| Chainguard | py3.10-hf-xet | 0 | 1.2.0-r5 |
| Chainguard | py3.11-hf-xet | 0 | 1.2.0-r5 |
| Chainguard | py3.12-hf-xet | 0 | 1.2.0-r5 |
| Chainguard | py3.13-hf-xet | 0 | 1.2.0-r5 |
| Chainguard | qdrant | 0 | 1.16.3-r5 |
| Chainguard | quiche | 0 | 0.25.0-r0 |
| Chainguard | rust-analyzer | 0 | 20260202-r1 |
| Chainguard | rye | 0 | 0.44.0-r5 |
| Chainguard | samply | 0 | 0.13.1-r8 |
| Chainguard | sccache | 0 | 0.14.0-r0 |
| Chainguard | sentry-cli | 0 | 3.2.0-r0 |
| Chainguard | shadowsocks-rust-ssserver | 0 | 1.24.0-r3 |
| Chainguard | sqlx | 0 | 0.8.6-r4 |
| Chainguard | starship | 0 | 1.24.2-r1 |
| Chainguard | topgrade | 0 | 16.9.0-r2 |
| Chainguard | typst | 0 | 0.14.2-r1 |
| Chainguard | uutils | 0 | 0.6.0-r1 |
| Chainguard | uv | 0 | 0.10.2-r1 |
| Chainguard | virtiofsd | 0 | 1.13.3-r2 |
| Chainguard | wadm | 0 | 0.21.1-r3 |
| Chainguard | wash | 0 | 0.39.0-r7 |
| Chainguard | wasm-pack | 0 | 0.14.0-r3 |
| Chainguard | wasmcloud | 0 | 2.0.1-r0 |
| Chainguard | watchexec | 0 | 2.3.3-r3 |
| Chainguard | xh | 0 | 0.25.3-r2 |
| Chainguard | yara-x | 0 | 1.12.0-r3 |
| Chainguard | yazi | 0 | 26.1.22-r3 |
| Chainguard | zed | 0 | 0.224.5-r0 |
| Chainguard | zellij | 0 | 0.43.1-r6 |
| Chainguard | zizmor | 0 | 1.22.0-r3 |
| Chainguard | zola | 0 | 0.22.1-r2 |
| Chainguard | ztunnel-1.27 | 0 | 1.27.5-r4 |
| Chainguard | ztunnel-1.28 | 0 | 1.28.3-r3 |
| Chainguard | ztunnel-fips-1.27 | 0 | 1.27.5-r4 |
| Chainguard | ztunnel-fips-1.28 | 0 | 1.28.3-r2 |
| SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS | cargo-auditable | 0 | 0.7.2~0-150500.12.6.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS | cargo-auditable | 0 | 0.7.2~0-150500.12.6.1 |
| SUSE:Linux Enterprise Micro 5.3 | rust-keylime | 0 | 0.2.8+116-150400.3.13.1 |
| SUSE:Linux Enterprise Micro 5.4 | rust-keylime | 0 | 0.2.8+116-150400.3.11.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP7 | SLES16-Migration | 0 | 2.1.30-15.26.4 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP7 | suse-migration-services | 0 | 2.1.30-150700.15.21.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP7 | suse-migration-sle16-activation | 0 | 2.1.30-150700.15.13.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP7 | virtiofsd | 0 | 1.12.0-150700.3.3.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP7 | wicked2nm | 0 | 1.4.1-150700.15.16.1 |
| SUSE:Linux Enterprise Module for SAP Applications 15 SP7 | SLES16-SAP_Migration | 0 | 2.1.30-15.18.4 |
| SUSE:Linux Enterprise Module for Server Applications 15 SP7 | snpguest | 0 | 0.10.0-150700.3.3.1 |
| SUSE:Linux Enterprise Server 15 SP5-LTSS | cargo-auditable | 0 | 0.7.2~0-150500.12.6.1 |
| SUSE:Linux Enterprise Server 15 SP6-LTSS | cargo-auditable | 0 | 0.7.2~0-150500.12.6.1 |
| SUSE:Linux Enterprise Server 15 SP6-LTSS | snpguest | 0 | 0.3.2-150600.3.9.1 |
| SUSE:Linux Enterprise Server 15 SP6-LTSS | virtiofsd | 0 | 1.10.1-150600.4.6.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP5 | cargo-auditable | 0 | 0.7.2~0-150500.12.6.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP6 | cargo-auditable | 0 | 0.7.2~0-150500.12.6.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP6 | snpguest | 0 | 0.3.2-150600.3.9.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP6 | virtiofsd | 0 | 1.10.1-150600.4.6.1 |
| SUSE:Linux Micro 6.1 | rust-keylime | 0 | 0.2.8+116-slfo.1.1_1.1 |
| Wolfi | atuin | 0 | 18.11.0-r2 |
| Wolfi | bat | 0 | 0.26.1-r3 |
| Wolfi | berg | 0 | 0.5.5-r0 |
| Wolfi | buck2 | 0 | 20260201-r1 |
| Wolfi | cargo-audit | 0 | 0.22.1-r1 |
| Wolfi | cargo-c | 0 | 0.10.20-r3 |
| Wolfi | cedar | 0 | 4.8.2-r3 |
| Wolfi | deno | 0 | 2.6.8-r2 |
| Wolfi | eza | 0 | 0.23.4-r3 |
| Wolfi | geckodriver | 0 | 0.36.0-r5 |
| Wolfi | kdash | 0 | 0.6.2-r11 |
| Wolfi | libquiche | 0 | 0.25.0-r0 |
| Wolfi | linkerd2-proxy | 0 | 2.338.0-r3 |
| Wolfi | lychee | 0 | 0.22.0-r5 |
| Wolfi | mountpoint-s3 | 0 | 1.22.0-r3 |
| Wolfi | nushell | 0 | 0.110.0-r2 |
| Wolfi | nushell-plugins | 0 | 0.110.0-r2 |
| Wolfi | oranda | 0 | 0.6.5-r14 |
| Wolfi | parseable | 0 | 2.5.11-r0 |
| Wolfi | pixi | 0 | 0.63.2-r3 |
| Wolfi | py3.10-hf-xet | 0 | 1.2.0-r5 |
| Wolfi | py3.11-hf-xet | 0 | 1.2.0-r5 |
| Wolfi | py3.12-hf-xet | 0 | 1.2.0-r5 |
| Wolfi | py3.13-hf-xet | 0 | 1.2.0-r5 |
| Wolfi | qdrant | 0 | 1.16.3-r5 |
| Wolfi | quiche | 0 | 0.25.0-r0 |
| Wolfi | rust-analyzer | 0 | 20260202-r1 |
| Wolfi | rye | 0 | 0.44.0-r5 |
| Wolfi | samply | 0 | 0.13.1-r8 |
| Wolfi | sccache | 0 | 0.14.0-r0 |
| Wolfi | shadowsocks-rust-ssserver | 0 | 1.24.0-r3 |
| Wolfi | sqlx | 0 | 0.8.6-r4 |
| Wolfi | starship | 0 | 1.24.2-r1 |
| Wolfi | topgrade | 0 | 16.9.0-r2 |
| Wolfi | uutils | 0 | 0.6.0-r1 |
| Wolfi | uv | 0 | 0.10.2-r1 |
| Wolfi | wadm | 0 | 0.21.1-r3 |
| Wolfi | wash | 0 | 0.39.0-r7 |
| Wolfi | wasm-pack | 0 | 0.14.0-r3 |
| Wolfi | wasmcloud | 0 | 2.0.1-r0 |
| Wolfi | xh | 0 | 0.25.3-r2 |
| Wolfi | yara-x | 0 | 1.12.0-r3 |
| Wolfi | yazi | 0 | 26.1.22-r3 |
| Wolfi | zed | 0 | 0.224.5-r0 |
| Wolfi | zellij | 0 | 0.43.1-r6 |
| Wolfi | zizmor | 0 | 1.22.0-r3 |
| Wolfi | zola | 0 | 0.22.1-r2 |
| Wolfi | ztunnel-1.27 | 0 | 1.27.5-r4 |
| Wolfi | ztunnel-1.28 | 0 | 1.28.3-r3 |
| openSUSE:Leap 15.6 | cargo-auditable | 0 | 0.7.2~0-150500.12.6.1 |
| openSUSE:Leap 15.6 | python-maturin | 0 | 1.4.0-150600.3.12.1 |
| openSUSE:Leap 15.6 | snpguest | 0 | 0.3.2-150600.3.9.1 |
| openSUSE:Leap 15.6 | virtiofsd | 0 | 1.10.1-150600.4.6.1 |
| openSUSE:Leap 16.0 | himmelblau | 0 | 2.3.8+git0.dec3693-160000.1.1 |
| openSUSE:Leap 16.0 | librsvg | 0 | 2.60.2-160000.2.1 |
| openSUSE:Leap 16.0 | python-maturin | 0 | 1.8.7-160000.4.1 |
| openSUSE:Leap 16.0 | rust-keylime | 0 | 0.2.8+116-160000.1.1 |
| openSUSE:Leap 16.0 | snpguest | 0 | 0.10.0-160000.1.1 |
| openSUSE:Leap 16.0 | virtiofsd | 0 | 1.12.0-160000.3.1 |
| openSUSE:Leap 16.0 | wicked2nm | 0 | 1.4.1-160000.1.1 |
| openSUSE:Tumbleweed | cargo-audit | 0 | 0.22.1~git0.efcde93-2.1 |
| openSUSE:Tumbleweed | cargo-auditable | 0 | 0.7.2~0-2.1 |
| openSUSE:Tumbleweed | cargo-c | 0 | 0.10.15-2.1 |
| openSUSE:Tumbleweed | himmelblau | 0 | 2.3.5+git0.9dd526c-1.1 |
| openSUSE:Tumbleweed | python-maturin | 0 | 1.11.5-1.1 |
| openSUSE:Tumbleweed | rust-keylime | 0 | 0.2.8+116-1.1 |
| openSUSE:Tumbleweed | rustup | 0 | 1.28.2~0-3.1 |
| openSUSE:Tumbleweed | sccache | 0 | 0.13.0~1-2.1 |
| openSUSE:Tumbleweed | snpguest | 0 | 0.10.0-2.1 |
| openSUSE:Tumbleweed | virtiofsd | 0 | 1.13.2-2.1 |
| openSUSE:Tumbleweed | wicked2nm | 0 | 1.4.1-1.1 |
Related vulnerabilities
- RUSTSEC-2026-0009 Denial of Service via Stack Exhaustion Same vulnerability
- CVE-2026-25541 Bytes is a utility library for working with bytes. Also affects atuin
- CVE-2026-21895 The `rsa` crate is an RSA implementation written in rust. Also affects atuin
- GHSA-9c48-w39g-hm26 rsa crate has potential panic on a prime being equal to 1 Also affects atuin
- CVE-2024-12224 `idna` accepts Punycode labels that do not produce any non-ASCII when decoded Also affects atuin
- CVE-2024-47609 Tonic is a native gRPC client & server implementation with async/await support. Also affects atuin
- CVE-2023-49092 RustCrypto/RSA is a portable RSA implementation in pure Rust. Also affects atuin
- CVE-2024-43806 Rustix is a set of safe Rust bindings to POSIX-ish APIs. Also affects bat