Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-12084

Опубликовано: 03 дек. 2025
Источник: nvd
CVSS3: 5.3
EPSS Низкий

Описание

When building nested elements using xml.dom.minidom methods such as appendChild() that have a dependency on _clear_id_cache() the algorithm is quadratic. Availability can be impacted when building excessively nested documents.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:python:python:*:*:*:*:*:*:*:*
Версия до 3.13.11 (исключая)
cpe:2.3:a:python:python:*:*:*:*:*:*:*:*
Версия от 3.14.0 (включая) до 3.14.2 (исключая)
cpe:2.3:a:python:python:3.15.0:alpha1:*:*:*:*:*:*
cpe:2.3:a:python:python:3.15.0:alpha2:*:*:*:*:*:*

EPSS

Процентиль: 19%
0.0006
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-407

Связанные уязвимости

CVSS3: 5.3
ubuntu
16 дней назад

When building nested elements using xml.dom.minidom methods such as appendChild() that have a dependency on _clear_id_cache() the algorithm is quadratic. Availability can be impacted when building excessively nested documents.

msrc
14 дней назад

Quadratic complexity in node ID cache clearing

CVSS3: 5.3
debian
16 дней назад

When building nested elements using xml.dom.minidom methods such as ap ...

CVSS3: 5.3
github
16 дней назад

When building nested elements using xml.dom.minidom methods such as appendChild() that have a dependency on _clear_id_cache() the algorithm is quadratic. Availability can be impacted when building excessively nested documents.

EPSS

Процентиль: 19%
0.0006
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-407