jkroso parse-duration

• CVE-2025-25283 High 7.5 parse-duraton vulnerable to Regex Denial of Service that results in event loop delay and out of memory 0.8%