Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
•added 2026/07/17 5:10 p.m.•49 views

vLLM: ReDoS via structured_outputs.regex compiled without timeout in xgrammar and outlines backends

Summary The structuredoutputs.regex API parameter passes a user-supplied regex string directly to grammar compiler backends with no compilation timeout. In the xgrammar backend, the string reaches compileregex with no guard. In the outlines backend, validateregexisbuildable blocks structural issu...

8.7CVSS6.1AI score0.00583EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder