6.9
Medium
CVE-2025-58446 xgrammar is an open-source library for efficient, flexible, and portable structured generation
Description
xgrammar is an open-source library for efficient, flexible, and portable structured generation. A grammar optimizer introduced in 0.1.23 processes large grammars (>100k characters) at very low rates, and can be used for DOS of model providers. This issue is fixed in version 0.1.24.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| xgrammar 0.1 | 0.1.23 → < 0.1.24 | 0.1.24 |
References
- github.com github.com
- github.com github.com
Timeline
- Published
- Last modified
Other CVEs of xgrammar
The 4 CVEs of xgrammar →
CVE-2026-25048
xgrammar is an open-source library for efficient, flexible, and portable structured generation
8.7
High
CVE-2025-57809
XGrammar is an open-source library for efficient, flexible, and portable structured generation
7.7
High
CVE-2025-32381
XGrammar is an open-source library for efficient, flexible, and portable structured generation
6.5
Medium