The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
time provides date and time handling in Rust. From 0.3.6 to before 0.3.47, when user-provided input is provided to any type that parses with the RFC 2822 format, a denial of service attack via stack exhaustion is possible. The attack relies on formally deprecated and rarely-used features that are part of the RFC 2822 format used in a malicious manner. Ordinary, non-malicious input will never encounter this scenario. A limit to the depth of recursion was added in v0.3.47. From this version, an error will be returned rather than exhausting the stack.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade amazon-efs-utilsUpgrade firefoxUpgrade thunderbird | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade librsvg2-tools-debuginfoUpgrade librsvg2-debugsourceUpgrade librsvg2-develUpgrade cargo-c-debuginfoUpgrade librsvg2-debuginfoUpgrade below-debuginfoUpgrade firefox-debugsourceUpgrade librsvg2-toolsUpgrade rsvg-pixbuf-loader-debuginfoUpgrade rsvg-pixbuf-loaderUpgrade librsvg2Upgrade belowUpgrade aws-nitro-tpm-toolsUpgrade mount-s3-debugsourceUpgrade mount-s3-debuginfoUpgrade rust-cargo-c-debugsourceUpgrade cargo-cUpgrade firefoxUpgrade rust-below-debugsourceUpgrade amazon-efs-utilsUpgrade mount-s3Upgrade firefox-debuginfo | Mar 9, 2026 | Feb 6, 2026 |
| Debian | — | Upgrade rust-time | Jul 12, 2026 | Jul 12, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Feb 6, 2026 |
| Suse | — | Upgrade cargo-auditable | Feb 16, 2026 | Feb 11, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub