CVE-2025-58446
Fixed in a distro release EPSS <1%CVSS 6.9
xgrammar is an open-source library for efficient, flexible, and portable structured generation. A grammar optimizer introduced in 0.1.23 processes large grammars (>100k characters) at very low rates, and can be used for DOS of model providers. This issue is fixed in version 0.1.24.
Products: mlc-ai xgrammar
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | xgrammar | 0.1.24 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Chainguard | tritonserver-backend-vllm-cuda-12.9 | 25.7.1_git20251001-r1 |
| Chainguard | tritonserver-backend-vllm-meta-cuda-12.9 | 25.7.1_git20251001-r1 |