6.3
/ 10
MEDIUM
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
Description
When building nested elements using xml.dom.minidom methods such as appendChild() that have a dependency on _clear_id_cache() the algorithm is quadratic. Availability can be impacted when building excessively nested documents.
Basic Information
ID
CVE-2025-12084
Source
PSF
Published
Dec 3, 2025 at 18:55
Modified
Dec 3, 2025 at 19:14
Affected Product
Vendor
Python Software Foundation
Product
CPython
Affected Versions
Python Software Foundation CPython 0