CVE-2021-29932: Parse Duration Project Parse Duration

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

An issue was discovered in the parse_duration crate through 2021-03-18 for Rust. It allows attackers to cause a denial of service (CPU and memory consumption) via a duration string with a large exponent.

Affected products

• Parse Duration Project Parse Duration: up to and including 2021-03-18

Published 2021-04-01. Last modified 2026-06-17.