Skip to content

[GHSA-r6v5-fh4h-64xc] time vulnerable to stack exhaustion Denial of Service attack#6792

Merged
advisory-database[bot] merged 1 commit intojhpratt/advisory-improvement-6792from
jhpratt-GHSA-r6v5-fh4h-64xc
Feb 6, 2026
Merged

[GHSA-r6v5-fh4h-64xc] time vulnerable to stack exhaustion Denial of Service attack#6792
advisory-database[bot] merged 1 commit intojhpratt/advisory-improvement-6792from
jhpratt-GHSA-r6v5-fh4h-64xc

Conversation

@jhpratt
Copy link

@jhpratt jhpratt commented Feb 6, 2026

Updates

  • References

Comments
The commit that was attached in my name and without my consent is objectively incorrect and does not fix a security issue. It is an ordinary bugfix.

@github
Copy link
Collaborator

github commented Feb 6, 2026

Hi there @jhpratt! A community member has suggested an improvement to your security advisory. If approved, this change will affect the global advisory listed at github.com/advisories. It will not affect the version listed in your project repository.

This change will be reviewed by our Security Curation Team. If you have thoughts or feedback, please share them in a comment here! If this PR has already been closed, you can start a new community contribution for this advisory

Copilot AI review requested due to automatic review settings February 6, 2026 07:46
@github-actions github-actions bot changed the base branch from main to jhpratt/advisory-improvement-6792 February 6, 2026 07:48
Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates a security advisory for the time Rust crate (GHSA-r6v5-fh4h-64xc) by correcting the commit reference that fixes a stack exhaustion denial of service vulnerability. The PR description indicates that the previous commit reference was incorrect and did not actually fix the security issue, characterizing it instead as an ordinary bugfix. The change updates the commit hash in the references section and increments the modified timestamp accordingly.

Changes:

  • Updated the commit reference URL from an incorrect commit to the correct security fix commit
  • Incremented the modified timestamp by one second to reflect the update

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@advisory-database advisory-database bot merged commit e6c0df7 into jhpratt/advisory-improvement-6792 Feb 6, 2026
9 of 10 checks passed
@advisory-database
Copy link
Contributor

Hi @jhpratt! Thank you so much for contributing to the GitHub Advisory Database. This database is free, open, and accessible to all, and it's people like you who make it great. Thanks for choosing to help others. We hope you send in more contributions in the future!

@advisory-database advisory-database bot deleted the jhpratt-GHSA-r6v5-fh4h-64xc branch February 6, 2026 15:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants