CVE-2025-12084Patch(python / python)

LOWCVSS 5.3 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch python python systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

When building nested elements using xml.dom.minidom methods such as appendChild() that have a dependency on _clear_id_cache() the algorithm is quadratic. Availability can be impacted when building excessively nested documents.

python CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Patch / fix

Other references

Weakness type (CWE)

CWE-407

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

python

Threat summary

Patch or workaround signal is available
2 mentions across 2 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 2 signals
Technical details provided in 2 signals
Peaked 1d ago at 1 mentions (2026-01-29); latest day: 1
2 total mentions across 2 days

Affected systems

Vendors

python

Products

python

1 version affected across 1 product

Deep dive

Activity timeline2 mentions / 2d

Signal classification1 categories

Patch

2100.0%

Referenced assets2 URLs

By indicator

Full discourse2 posts

Ferramentas Linux@Cezar_H_Linux206d
Patch
Just published a deep dive on the #Fedora 42 patch for CVE-2025-12084. It's fascinating (and a little scary) how a quadratic algorithm in xml.dom.minidom can be weaponized into a full-on DoS attack. Read more: 👉https://tinyurl.com/2s49zsh6 #Security https://t.co/t5AdmDe6Tr
Post summary
The tweet highlights the release of a Fedora 42 patch for CVE-2025-12084, noting the vulnerability’s DoS potential via a quadratic algorithm in xml.dom.minidom.
00000102
1.5K followersView on X
Ferramentas Linux@Cezar_H_Linux252d
Patch
Critical Python 3.11 patch for #SUSE/#openSUSE. Fixes CVE-2025-12084 (DoS), CVE-2025-13836 (HTTP attack), CVE-2025-13837 (OOM). Patch now: zypper patch. Read more: 👉 https://tinyurl.com/cfmna2d6 #Security https://t.co/6WmUY6Vfz2
Post summary
SUSE’s latest Python 3.11 patch addresses three CVEs—DoS, HTTP attack, and OOM—and can be installed via zypper.
0000070
1.3K followersView on X

CPE platform detail3 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

3 of 3 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	python	python	-	-	-
App	python	python	3.15.0	-	-
App	python	python	3.15.0	-	-

Explore more

Back to dashboard python CVEs python vulnerabilities