Lucene search
K

7 matches found

Veracode
Veracode
added 2026/03/07 5:14 a.m.5 views

Denial Of Service (DoS)

xgrammar is vulnerable to Denial of Service DoS. The vulnerability is due to improper handling of multi-level nested syntax, which can trigger a segmentation fault and crash the application...

8.7CVSS5.8AI score0.00421EPSS
Exploits1References3Affected Software1
EUVD
EUVD
added 2026/03/05 6:20 p.m.3 views

EUVD-2026-9830

xgrammar vulnerable to DoS via multi-layer nesting...

8.7CVSS5.9AI score0.00421EPSS
Exploits1References2
OSV
OSV
added 2026/03/05 6:20 p.m.3 views

GHSA-7RGV-GQHR-FXG3 xgrammar vulnerable to DoS via multi-layer nesting

Summary The multi-level nested syntax caused a segmentation fault core dump. Details A trigger stack overflow or memory exhaustion was caused by constructing a malicious grammar rule containing 30,000 layers of nested parentheses. PoC !/usr/bin/env python3 """ XGrammar - Math Expression Generatio...

8.7CVSS5.9AI score0.00421EPSS
Exploits1References4
NVD
NVD
added 2026/03/05 4:16 p.m.8 views

CVE-2026-25048

xgrammar is an open-source library for efficient, flexible, and portable structured generation. Prior to version 0.1.32, the multi-level nested syntax caused a segmentation fault core dumped. This issue has been patched in version 0.1.32...

8.7CVSS0.00421EPSS
Exploits1References2
ATTACKERKB
ATTACKERKB
added 2026/03/05 3:34 p.m.4 views

CVE-2026-25048

xgrammar is an open-source library for efficient, flexible, and portable structured generation. Prior to version 0.1.32, the multi-level nested syntax caused a segmentation fault core dumped. This issue has been patched in version 0.1.32...

8.7CVSS5.8AI score0.00421EPSS
Exploits1References3Affected Software1
Positive Technologies
Positive Technologies
added 2026/03/05 12:0 a.m.2 views

PT-2026-23453

Name of the Vulnerable Software and Affected Versions xgrammar versions prior to 0.1.32 Description xgrammar, an open-source library for structured generation, experienced a segmentation fault due to multi-level nested syntax in versions prior to 0.1.32. This issue can lead to a denial-of-service...

8.7CVSS5.8AI score0.00421EPSS
Exploits1References12
CNNVD
CNNVD
added 2026/03/05 12:0 a.m.6 views

XGrammar 安全漏洞

XGrammar is a fast, flexible, and portable structured generation tool open source by mlc-ai. Versions of XGrammer before 0.1.32 have security vulnerabilities, which are caused by multi-level nested syntax leading to segmentation errors...

8.7CVSS5.8AI score0.00421EPSS
Exploits1References3
Rows per page
Query Builder