Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-12084

Опубликовано: 03 дек. 2025
Источник: nvd
CVSS3: 5.3
EPSS Низкий

Описание

When building nested elements using xml.dom.minidom methods such as appendChild() that have a dependency on _clear_id_cache() the algorithm is quadratic. Availability can be impacted when building excessively nested documents.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:python:python:*:*:*:*:*:*:*:*
Версия до 3.13.11 (исключая)
cpe:2.3:a:python:python:*:*:*:*:*:*:*:*
Версия от 3.14.0 (включая) до 3.14.2 (исключая)
cpe:2.3:a:python:python:3.15.0:alpha1:*:*:*:*:*:*
cpe:2.3:a:python:python:3.15.0:alpha2:*:*:*:*:*:*

EPSS

Процентиль: 26%
0.0009
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-407

Связанные уязвимости

CVSS3: 5.3
ubuntu
2 месяца назад

When building nested elements using xml.dom.minidom methods such as appendChild() that have a dependency on _clear_id_cache() the algorithm is quadratic. Availability can be impacted when building excessively nested documents.

msrc
2 месяца назад

Quadratic complexity in node ID cache clearing

CVSS3: 5.3
debian
2 месяца назад

When building nested elements using xml.dom.minidom methods such as ap ...

CVSS3: 5.3
github
2 месяца назад

When building nested elements using xml.dom.minidom methods such as appendChild() that have a dependency on _clear_id_cache() the algorithm is quadratic. Availability can be impacted when building excessively nested documents.

rocky
28 дней назад

Moderate: python3.12 security update

EPSS

Процентиль: 26%
0.0009
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-407