CVE-2012-0877: PyXML: Hash table collisions CPU usage Denial of Service

Security readout for executives and security teams

CVE-2012-0877 is a denial-of-service issue in PyXML. If a system still uses affected PyXML versions and processes attacker-controlled XML, crafted input may drive excessive CPU usage and degrade service availability. The provided sources do not include CVSS, CWE, active exploitation, or a specific fix. Most likely exposure is legacy Python applications or packaged systems that still depend on PyXML and parse XML from users, partners, APIs, queues, or files. Modern environments may be unaffected if PyXML is absent. Prioritize as a legacy availability risk. It is not supported by the provided evidence as actively exploited or code-execution capable, but internet-facing or partner-facing XML processing should be reviewed because CPU exhaustion can still disrupt business services. Mitigation focus: Inventory applications and hosts for PyXML dependency usage.; Check vendor advisories for supported fixes or package status.; Remove or replace PyXML where it is no longer required..

Prepared

Jun 6, 2026, 04:48 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.