CVE-2025-12084

UNKNOWN 0.0

Quadratic complexity in node ID cache clearing

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

When building nested elements using xml.dom.minidom methods such as appendChild() that have a dependency on _clear_id_cache() the algorithm is quadratic. Availability can be impacted when building excessively nested documents.

Vendor	python software foundation
Product	cpython
Published	Dec 3, 2025
Last Updated	Mar 3, 2026

Stay Ahead of the Next One

Get instant alerts for python software foundation cpython

Be the first to know when new unknown vulnerabilities affecting python software foundation cpython are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Python Software Foundation / CPython

0 < 3.10.20 3.11.0 < 3.11.15 3.12.0 < 3.12.13 3.13.0 < 3.13.11 3.14.0 < 3.14.2 3.15.0a1 < 3.15.0a3

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/python/cpython/pull/142146 github.com: https://github.com/python/cpython/issues/142145 github.com: https://github.com/python/cpython/commit/08d8e18ad81cd45bc4a27d6da478b51ea49486e4 github.com: https://github.com/python/cpython/commit/027f21e417b26eed4505ac2db101a4352b7c51a0 github.com: https://github.com/python/cpython/commit/ddcd2acd85d891a53e281c773b3093f9db953964 github.com: https://github.com/python/cpython/commit/27648a1818749ef44c420afe6173af6868715437 github.com: https://github.com/python/cpython/commit/8d2d7bb2e754f8649a68ce4116271a4932f76907 github.com: https://github.com/python/cpython/commit/9c9dda6625a2a90d2a06c657eee021d6be19842d github.com: https://github.com/python/cpython/commit/a696ba8b4d42fd632afc9bc88ad830a2e4cceed8 github.com: https://github.com/python/cpython/commit/41f468786762348960486c166833a218a0a436af github.com: https://github.com/python/cpython/commit/57937a8e5e293f0dcba5115f7b7a11b1e0c9a273 github.com: https://github.com/python/cpython/commit/e91c11449cad34bac3ea55ee09ca557691d92b53 github.com: https://github.com/python/cpython/commit/a46c10ec9d4050ab67b8a932e0859a2ea60c3cb8 github.com: https://github.com/python/cpython/commit/c97e87593063d84a2bd9fe7068b30eb44de23dc0

Credits

🔍 Jacob Walls 🔍 Shai Berger 🔍 Natalia Bidart Seth Larson