CVE-2025-12084

Updated: 2025-12-28 04:13:26.790883

Description:

When building nested elements using xml.dom.minidom methods such as appendChild() that have a dependency on _clear_id_cache() the algorithm is quadratic. Availability can be impacted when building excessively nested documents.


Links NIST CIRCL RHEL Ubuntu

Severity

Severity Score
CVSS Version 2.x 0.0
CVSS Version 3.x MEDIUM 5.3

Status

OS name Project name Version Score Severity Status Errata Last updated

Statement

EL 9 python 3.6 5.3 MEDIUM Needs Triage 2025-12-28 07:12:54
EL 9 python 2.7 5.3 MEDIUM Needs Triage 2025-12-28 07:13:08
Ubuntu 16.04 python 2.7 5.3 MEDIUM Needs Triage 2025-12-28 07:13:00
Ubuntu 16.04 python 3.6 5.3 MEDIUM Needs Triage 2025-12-28 07:12:49
Ubuntu 18.04 python 2.7 5.3 MEDIUM Needs Triage 2025-12-28 07:13:04
Ubuntu 18.04 python 3.6 5.3 MEDIUM Needs Triage 2025-12-28 07:12:51
Ubuntu 20.04 python 2.7 5.3 MEDIUM Needs Triage 2025-12-28 07:13:06
Ubuntu 20.04 python 3.6 5.3 MEDIUM Needs Triage 2025-12-28 07:12:52
Ubuntu 22.04 python 2.7 5.3 MEDIUM Needs Triage 2025-12-28 07:13:07
Ubuntu 22.04 python 3.6 5.3 MEDIUM Needs Triage 2025-12-28 07:12:53
Total: 32