Skip to content

Update changelog to downgrade severity of text-iso8601 year parsing issue - #1197

Open
Lysxia wants to merge 1 commit into
masterfrom
year-low
Open

Lysxia wants to merge 1 commit into
masterfrom
year-low

Conversation

@Lysxia

@Lysxia Lysxia commented Sep 17, 2026

Copy link
Copy Markdown
Collaborator

Close #1195 (see also haskell/security-advisories#339 for the HSEC side.)

Sorry for the back and forth on this issue. Even I feel like it would have been simpler to handle this "correctly" from the start but hindsight is 20/20 and I'm just learning what to watch out for as I go. "Security vulnerability" are scary-sounding words but in the grand scheme of things, slow parsers are really not a big deal. I'll take this as a learning opportunity and do better next time.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Why the parseYear is considered security vulnerability?

1 participant