logo

Database

Improper resource allocation In jython

Description

When building nested elements using xml.dom.minidom methods such as appendChild() that have a dependency on _clear_id_cache() the algorithm is quadratic. Availability can be impacted when building excessively nested documents.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions

1-10 of 28

10

Aliases

1. CVE-2025-120842. NVD-2025-120843. OSV-2025-120844. OSV-DEBIAN-2025-120845. GCVE-2025-120846. SECURITY-TRACKER-CVE-2025-120847. https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/12xxx/CVE-2025-12084.json

References

1. https://github.com/python/cpython/issues/1421452. https://github.com/python/cpython/commit/027f21e417b26eed4505ac2db101a4352b7c51a03. https://github.com/python/cpython/commit/08d8e18ad81cd45bc4a27d6da478b51ea49486e44. https://github.com/python/cpython/commit/27648a1818749ef44c420afe6173af68687154375. https://github.com/python/cpython/commit/41f468786762348960486c166833a218a0a436af6. https://github.com/python/cpython/commit/57937a8e5e293f0dcba5115f7b7a11b1e0c9a2737. https://github.com/python/cpython/commit/8d2d7bb2e754f8649a68ce4116271a4932f769078. https://github.com/python/cpython/commit/9c9dda6625a2a90d2a06c657eee021d6be19842d9. https://github.com/python/cpython/commit/a46c10ec9d4050ab67b8a932e0859a2ea60c3cb810. https://github.com/python/cpython/commit/a696ba8b4d42fd632afc9bc88ad830a2e4cceed811. https://github.com/python/cpython/commit/c97e87593063d84a2bd9fe7068b30eb44de23dc012. https://github.com/python/cpython/commit/ddcd2acd85d891a53e281c773b3093f9db95396413. https://github.com/python/cpython/commit/e91c11449cad34bac3ea55ee09ca557691d92b5314. https://github.com/python/cpython/pull/142146

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.