Skip to content
OpenAdvisories
High · 7.7 CVE-2025-57809 EUVD-2025-28633GHSA-5cmr-4px5-23pcPYSEC-2026-2054

XGrammar affected by Denial of Service by infinite recursion grammars

Published Aug 25, 2025 · Updated Aug 26, 2025 · Assigned by GitHub_M

Description

XGrammar is an open-source library for efficient, flexible, and portable structured generation. Prior to version 0.1.21, XGrammar has an infinite recursion issue in the grammar. This issue has been resolved in version 0.1.21.

Affected products

VendorProductAffectedFixed
mlc-ai xgrammar < 0.1.21 —

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI xgrammar < 0.1.21 0.1.21 GHSA-5cmr-4px5-23pc

References