When building nested elements using xml.dom.minidom methods such as appendChild() that have a dependency on _clear_id_cache() the algorithm is quadratic. Availability can be impacted when building excessively nested documents.
An algorithm in a product has an inefficient worst-case computational complexity that may be detrimental to system performance and can be triggered by an attacker, typically using crafted manipulations that ensure that the worst case is being reached.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Python | Python | * | 3.13.11 (excluding) |
| Python | Python | 3.14.0 (including) | 3.14.2 (excluding) |
| Python | Python | 3.15.0-alpha1 (including) | 3.15.0-alpha1 (including) |
| Python | Python | 3.15.0-alpha2 (including) | 3.15.0-alpha2 (including) |
| Red Hat Enterprise Linux 8 | RedHat | python3.12-0:3.12.12-1.el8_10 | * |
| Jython | Ubuntu | plucky | * |
| Pypy3 | Ubuntu | plucky | * |
| Python3.13 | Ubuntu | plucky | * |
| Python3.13 | Ubuntu | upstream | * |
| Python3.14 | Ubuntu | upstream | * |