CVE-2025-58446 — xgrammar vulnerable to denial of service by huge enum grammar
xgrammar is an open-source library for efficient, flexible, and portable structured generation. A grammar optimizer introduced in 0.1.23 processes large grammars (>100k characte…
Published: 2025-09-06 · CVSS: 6.9 · CVSS 4.0
xgrammar is an open-source library for efficient, flexible, and portable structured generation. A grammar optimizer introduced in 0.1.23 processes large grammars (>100k characters) at very low rates, and can be used for DOS of model providers. This issue is fixed in version 0.1.24.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7