CVE-2025-12084

When building nested elements using xml.dom.minidom methods such as appendChild() that have a dependency on _clear_id_cache() the algorithm is quadratic. Availability can be impacted when building excessively nested documents.

Credits

Jacob Walls
Shai Berger
Natalia Bidart
Seth Larson

References