CVE-2025-12084: Quadratic complexity in node ID cache clearing

Modified

AliasesRHSA-2026:1478RHSA-2026:1537RHSA-2026:1558+25 more

Published 03-12-2025Last modified 03-03-2026

Vulnerability summary

CVE-2025-12084 is a medium (CVSS 6.3) Inefficient Algorithmic Complexity vulnerability in python software foundation cpython. EPSS estimates a 0.86% chance of exploitation in the next 30 days, higher than 58.4% of scored vulnerabilities.

Priority

Routine

Not severe (CVSS 6.3, network access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?

CVSS score

6.3/10

010

Medium · v4.0 (CVE.org)

EPSS score

0.86%

0%100%

Low · +0.06 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 44 · Related 31

DLA-4445-1 DLA-4455-1 MGASA-2025-0324 OPENSUSE-SU-2025:15839-1 OPENSUSE-SU-2025:15840-1 OPENSUSE-SU-2025:15846-1+42 more

Timeline

03-12-2025
PublishedVulnerability first disclosed.
03-03-2026
Last modifiedVulnerability information updated.

Description

When building nested elements using xml.dom.minidom methods such as appendChild() that have a dependency on _clear_id_cache() the algorithm is quadratic. Availability can be impacted when building excessively nested documents.

CVSS metrics

9 scores · 7 sources · 2 versions

v4.06.3v3.17.5

EPSS trend

Probability

0.86%

Chance of exploitation in the next 30 days

Percentile

58%

Versus all other CVEs

30-day change

Increase +0.06 pp

From 0.80% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-407Inefficient Algorithmic ComplexityAn algorithm in a product has an inefficient worst-case computational complexity that may be detrimental to system performance and can be triggered by an attacker, typically using crafted manipulations that ensure that the worst case is being reached.

Affected systems

Version check

Known conditions: network-reachable, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.

Redhat33 products

platform-python< 0:3.6.8-39.el8_4.8 | < 0:3.6.8-24.el8_2.5 | < 0:3.6.8-72.el8_10 | < 0:3.6.8-51.el8_8.12 | < 0:3.6.8-47.el8_6.10
platform-python-debug< 0:3.6.8-39.el8_4.8 | < 0:3.6.8-24.el8_2.5 | < 0:3.6.8-72.el8_10 | < 0:3.6.8-51.el8_8.12 | < 0:3.6.8-47.el8_6.10
platform-python-devel< 0:3.6.8-39.el8_4.8 | < 0:3.6.8-24.el8_2.5 | < 0:3.6.8-72.el8_10 | < 0:3.6.8-51.el8_8.12 | < 0:3.6.8-47.el8_6.10
python< 0:2.7.5-94.el7_9.2
python-debug< 0:2.7.5-94.el7_9.2

python-debuginfo< 0:2.7.5-94.el7_9.2
python-devel< 0:2.7.5-94.el7_9.2
python-libs< 0:2.7.5-94.el7_9.2
python-test< 0:2.7.5-94.el7_9.2
python-tools< 0:2.7.5-94.el7_9.2
python-unversioned-command< 0:3.9.25-3.el9_7 | < 0:3.9.21-2.el9_6.3 | < 0:3.9.18-3.el9_4.10 | < 0:3.9.16-1.el9_2.11 | < 0:3.9.10-4.el9_0.8
python3< 0:3.9.25-3.el9_7 | < 0:3.6.8-39.el8_4.8 | < 0:3.6.8-24.el8_2.5 | < 0:3.6.8-72.el8_10 | < 0:3.9.21-2.el9_6.3 | < 0:3.9.18-3.el9_4.10 | < 0:3.6.8-51.el8_8.12 | < 0:3.6.8-47.el8_6.10 | < 0:3.9.16-1.el9_2.11 | < 0:3.9.10-4.el9_0.8 | < 0:3.6.8-21.el7_9.3
python3-debug< 0:3.9.25-3.el9_7 | < 0:3.9.21-2.el9_6.3 | < 0:3.9.18-3.el9_4.10 | < 0:3.6.8-21.el7_9.3
python3-debuginfo< 0:3.6.8-39.el8_4.8 | < 0:3.6.8-24.el8_2.5 | < 0:3.6.8-72.el8_10 | < 0:3.6.8-51.el8_8.12 | < 0:3.6.8-47.el8_6.10 | < 0:3.6.8-21.el7_9.3
python3-debugsource< 0:3.6.8-39.el8_4.8 | < 0:3.6.8-24.el8_2.5 | < 0:3.6.8-72.el8_10 | < 0:3.6.8-51.el8_8.12 | < 0:3.6.8-47.el8_6.10
python3-devel< 0:3.9.25-3.el9_7 | < 0:3.9.21-2.el9_6.3 | < 0:3.9.18-3.el9_4.10 | < 0:3.9.16-1.el9_2.11 | < 0:3.9.10-4.el9_0.8 | < 0:3.6.8-21.el7_9.3
python3-idle< 0:3.9.25-3.el9_7 | < 0:3.6.8-39.el8_4.8 | < 0:3.6.8-24.el8_2.5 | < 0:3.6.8-72.el8_10 | < 0:3.9.21-2.el9_6.3 | < 0:3.9.18-3.el9_4.10 | < 0:3.6.8-51.el8_8.12 | < 0:3.6.8-47.el8_6.10 | < 0:3.6.8-21.el7_9.3
python3-libs< 0:3.9.25-3.el9_7 | < 0:3.6.8-39.el8_4.8 | < 0:3.6.8-24.el8_2.5 | < 0:3.6.8-72.el8_10 | < 0:3.9.21-2.el9_6.3 | < 0:3.9.18-3.el9_4.10 | < 0:3.6.8-51.el8_8.12 | < 0:3.6.8-47.el8_6.10 | < 0:3.9.16-1.el9_2.11 | < 0:3.9.10-4.el9_0.8 | < 0:3.6.8-21.el7_9.3
python3-test< 0:3.9.25-3.el9_7 | < 0:3.6.8-39.el8_4.8 | < 0:3.6.8-24.el8_2.5 | < 0:3.6.8-72.el8_10 | < 0:3.9.21-2.el9_6.3 | < 0:3.9.18-3.el9_4.10 | < 0:3.6.8-51.el8_8.12 | < 0:3.6.8-47.el8_6.10 | < 0:3.6.8-21.el7_9.3
python3-tkinter< 0:3.9.25-3.el9_7 | < 0:3.6.8-39.el8_4.8 | < 0:3.6.8-24.el8_2.5 | < 0:3.6.8-72.el8_10 | < 0:3.9.21-2.el9_6.3 | < 0:3.9.18-3.el9_4.10 | < 0:3.6.8-51.el8_8.12 | < 0:3.6.8-47.el8_6.10 | < 0:3.9.16-1.el9_2.11 | < 0:3.9.10-4.el9_0.8 | < 0:3.6.8-21.el7_9.3
python3.12< 0:3.12.1-4.el9_4.9 | < 0:3.12.9-1.el9_6.4
python3.12-debug< 0:3.12.1-4.el9_4.9 | < 0:3.12.9-1.el9_6.4
python3.12-debuginfo< 0:3.12.1-4.el9_4.9 | < 0:3.12.9-1.el9_6.4
python3.12-debugsource< 0:3.12.1-4.el9_4.9 | < 0:3.12.9-1.el9_6.4
python3.12-devel< 0:3.12.1-4.el9_4.9 | < 0:3.12.9-1.el9_6.4
python3.12-idle< 0:3.12.1-4.el9_4.9 | < 0:3.12.9-1.el9_6.4
python3.12-libs< 0:3.12.1-4.el9_4.9 | < 0:3.12.9-1.el9_6.4
python3.12-test< 0:3.12.1-4.el9_4.9 | < 0:3.12.9-1.el9_6.4
python3.12-tkinter< 0:3.12.1-4.el9_4.9 | < 0:3.12.9-1.el9_6.4
python39< 0:3.9.25-3.el9_7 | < 0:3.9.21-2.el9_6.3 | < 0:3.9.18-3.el9_4.10 | < 0:3.9.16-1.el9_2.11 | < 0:3.9.10-4.el9_0.8
python39-debuginfo< 0:3.9.25-3.el9_7 | < 0:3.9.21-2.el9_6.3 | < 0:3.9.18-3.el9_4.10 | < 0:3.9.16-1.el9_2.11 | < 0:3.9.10-4.el9_0.8
python39-debugsource< 0:3.9.25-3.el9_7 | < 0:3.9.21-2.el9_6.3 | < 0:3.9.18-3.el9_4.10 | < 0:3.9.16-1.el9_2.11 | < 0:3.9.10-4.el9_0.8
tkinter< 0:2.7.5-94.el7_9.2

Show all 33

Ubuntu14 products

jythonAll versions (No fix recorded)
pypy3All versions (No fix recorded)
python2.7< 2.7.6-8ubuntu0.6+esm29 | < 2.7.12-1ubuntu0~16.04.18+esm19 | < 2.7.17-1~18.04ubuntu1.13+esm14 | < 2.7.18-13ubuntu1.5+esm8
python3.10< 3.10.12-1~22.04.14
python3.11< 3.11.0~rc1-1~22.04.1~esm8

Show all 14

Chainguard6 products

python-3.10< 3.10.19-r4
python-3.11< 3.11.15-r0
python-3.12< 3.12.12-r4
python-3.13< 3.13.11-r2
python-3.14< 3.14.2-r1

Show all 6

Debian5 products

jythonAll versions (No fix recorded)
pypy3All versions (No fix recorded) | < 7.3.21+dfsg-1
python3.11< 3.11.2-6+deb12u7
python3.13< 3.13.11-1 | < 3.13.5-2+deb13u1
python3.14< 3.14.2-1

Wolfi5 products

python-3.10< 3.10.19-r4
python-3.11< 3.11.15-r0
python-3.12< 3.12.12-r4
python-3.13< 3.13.11-r2
python-3.14< 3.14.2-r1

Python1 product

python< 3.13.11 | ≥ 3.14.0, < 3.14.2 | 3.15.0:alpha1 | 3.15.0:alpha2

Python software foundation1 product

cpython< 3.10.20 | ≥ 3.11.0, < 3.11.15 | ≥ 3.12.0, < 3.12.13 | ≥ 3.13.0, < 3.13.11 | ≥ 3.14.0, < 3.14.2 | ≥ 3.15.0a1, < 3.15.0a3

7 vendors · 65 products

References

53 links

github.com/python/cpython/pull/142146PatchARTICLEFIXIssue Tracking
github.com/python/cpython/issues/142145Issue TrackingARTICLEREPORTPatch
github.com/python/cpython/commit/08d8e18ad81cd45bc4a27d6da478b51ea49486e4PatchFIX
github.com/python/cpython/commit/027f21e417b26eed4505ac2db101a4352b7c51a0PatchFIX
github.com/python/cpython/commit/ddcd2acd85d891a53e281c773b3093f9db953964PatchFIX
github.com/python/cpython/commit/27648a1818749ef44c420afe6173af6868715437PatchFIX
github.com/python/cpython/commit/8d2d7bb2e754f8649a68ce4116271a4932f76907PatchFIX
github.com/python/cpython/commit/9c9dda6625a2a90d2a06c657eee021d6be19842dPatchFIX
github.com/python/cpython/commit/a696ba8b4d42fd632afc9bc88ad830a2e4cceed8PatchFIX
github.com/python/cpython/commit/41f468786762348960486c166833a218a0a436afPatchFIX

Show all 53 references