CVE-2025-58446 – xgrammar vulnerable to denial of service by huge enum grammar

CVE ID : CVE-2025-58446

Published : Sept. 6, 2025, 7:06 p.m. | 15 minutes ago

Description : xgrammar is an open-source library for efficient, flexible, and portable structured generation. A grammar optimizer introduced in 0.1.23 processes large grammars (>100k characters) at very low rates, and can be used for DOS of model providers. This issue is fixed in version 0.1.24.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…