Regular Expression Denial Of Service (ReDoS)

timespan is vulnerable to regular expression denial of service (ReDoS) attacks. The library does not restrict the type of characters in a timestamp before parsing it, allowing a malicious user to pass a timestamp to cause a ReDoS.