CVE-2026-25727

CVE-2026-25727 is a medium-severity denial-of-service vulnerability affecting the 'time' crate in Rust versions 0.3.6 through 0.3.46. It allows for stack exhaustion via maliciously crafted RFC 2822 formatted input, exploiting rarely used features of the standard. The attack vector is network-based with low complexity, requiring user interaction, and can lead to high availability impact. While not actively exploited in the wild and lacking public exploit code, it has garnered significant community discussion and media coverage, indicating awareness among security professionals.