Skip to main content
cve.nowby Sazabi
← PyPI
PyPIPackage

xgrammar

4 known vulnerabilities (2 high, 2 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
4 · 2 high, 2 medium
Weekly downloads
1.2M
Dependents
133
Registry
PyPI

Advisories 4

  • xgrammar: Multi-layer nesting causes DoS

    Affected: fixed in 0.1.32; fixed in 0.1.32.

  • CVE-2025-58446Medium 6.9

    xgrammar vulnerable to denial of service by huge enum grammar

    Affected: from 0.1.23, fixed in 0.1.24.

  • XGrammar affected by Denial of Service by infinite recursion grammars

    Affected: fixed in 0.1.21; fixed in 0.1.21.

  • CVE-2025-32381Medium 6.5

    Denial of Service by abusing xgrammar unbounded cache in memory

    Affected: fixed in 0.1.18; fixed in 0.1.18.