CVE-2025-57809

XGrammar is an open-source library for efficient, flexible, and portable structured generation. Prior to version 0.1.21, XGrammar has an infinite recursion issue in the grammar. This issue has been resolved in version 0.1.21.

Scoring

Severity

HIGH

CVSS base score

7.7

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P

EPSS probability

0.47%

CWE

CWE-674

Published

2025-08-25

Last modified

2026-03-13

Affected products

• mlc-ai xgrammar

Weakness type

• CWE-674

Related vulnerabilities

• CVE-2026-22591 — Fast DDS DDSSQLFilter Recursive Parser Stack Exhaustion (Remote DoS)
• CVE-2026-19201 — Denial of Service via Unbounded Recursion in go-attestation Windows SIPA Parser
• CVE-2026-69378 — Microsoft Exchange Server Denial of Service Vulnerability
• CVE-2026-73321 — XenForo < 2.3.13 Uncontrolled Recursion DoS via BBCode Parser
• CVE-2026-11573 — QDomDocument::toByteArray() crashes when parsing svg file
• CVE-2026-17440 — IBM App Connect Enterprise and IBM Integration Bus for z/OS Adapter nodes are vulnerable to multiple CVEs
• CVE-2026-77465 — toml-node: Uncontrolled Recursion
• CVE-2026-84851 — Uncontrolled recursion in the Ion reader in Amazon Ion-C before 1.1.6

Markdown version · Browse all CVEs