Skip to content
CVE PROGRAM SOURCE RECORD6.3 Medium

CVE-2025-12084

Quadratic complexity in node ID cache clearing

Description

When building nested elements using xml.dom.minidom methods such as appendChild() that have a dependency on _clear_id_cache() the algorithm is quadratic. Availability can be impacted when building excessively nested documents.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Python Software Foundation CPython

Default version status: unaffected

  • 0 to < 3.10.20affected
  • 3.11.0 to < 3.11.15affected
  • 3.12.0 to < 3.12.13affected
  • 3.13.0 to < 3.13.11affected
  • 3.14.0 to < 3.14.2affected
  • 3.15.0a1 to < 3.15.0a3affected

References