Vendor
mlc-ai
4 known vulnerabilities.
Products
2 results · Clear filters · Feed
-
Medium 6.9
xgrammar vulnerable to denial of service by huge enum grammar
xgrammar is an open-source library for efficient, flexible, and portable structured generation. A grammar optimizer introduced in 0.1.23 processes large grammars (>100k characters) at very low rates, and can be used for DOS of model providers. This issue is f…
-
Medium 6.5
Denial of Service by abusing xgrammar unbounded cache in memory
XGrammar is an open-source library for efficient, flexible, and portable structured generation. Prior to 0.1.18, Xgrammar includes a cache for compiled grammars to increase performance with repeated use of the same grammar. This cache is held in memory. Since…