CVE-2017-18589

CVE-2017-18589 affects the Rust cookie crate (pre-0.7.6). The issue arises from using time::Duration::seconds to parse Max-Age; very large integer values trigger a panic, potentially causing DoS. The Red Hat, Debian, GHSA, OSV, and RustSec records corroborate: the vulnerability is caused by Max-A...