CVE 6.3 MEDIUM

Quadratic complexity in node ID cache clearing_CVE-2025-12084

6.3 / 10
MEDIUM
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

Description

When building nested elements using xml.dom.minidom methods such as appendChild() that have a dependency on _clear_id_cache() the algorithm is quadratic. Availability can be impacted when building excessively nested documents.

Basic Information

ID CVE-2025-12084
Source PSF
Published Dec 3, 2025 at 18:55
Modified Dec 3, 2025 at 19:14

Affected Product

Vendor Python Software Foundation
Product CPython
Affected Versions Python Software Foundation CPython 0

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.