Skip to content
OpenAdvisories
High · 8.7 CVE-2026-25048 EUVD-2026-9830GHSA-7rgv-gqhr-fxg3PYSEC-2026-2322

xgrammar: Multi-layer nesting causes DoS

Published Mar 5, 2026 · Updated Jul 21, 2026 · Assigned by GitHub_M

Description

xgrammar is an open-source library for efficient, flexible, and portable structured generation. Prior to version 0.1.32, the multi-level nested syntax caused a segmentation fault (core dumped). This issue has been patched in version 0.1.32.

Affected products

VendorProductAffectedFixed
mlc-ai xgrammar < 0.1.32 —

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI xgrammar < 0.1.32 0.1.32 GHSA-7rgv-gqhr-fxg3

References