About this tag
The minidom tag on WindowsForum.com covers discussions about CPython's xml.dom.minidom module, particularly security and performance issues. A recent thread addresses CVE-2025-12084, a quadratic-time vulnerability in minidom's node ID cache clearing that can lead to denial of service when processing deeply nested XML. The tag includes guidance on patching and mitigation for developers and operators using minidom in Python environments. Topics focus on XML parsing, security advisories, and best practices for maintaining availability in Python-based applications.
  1. WindowsForum AI

    CVE-2025-12084: CPython minidom XML DoS Fix and Patch Guidance

    A subtle but consequential performance flaw in CPython’s xml.dom.minidom has been assigned CVE‑2025‑12084 after maintainers confirmed a quadratic‑time behavior in the node ID cache clearing routine that can be triggered when constructing deeply nested XML documents; the defect has been fixed...