https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T06:18:11.390394+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-57809 CVE-2025-57809 — XGrammar affected by Denial of Service by infinite recursion grammars 2026-10-03T06:18:11.443074+00:00

Affected: mlc-ai xgrammar

XGrammar is an open-source library for efficient, flexible, and portable structured generation. Prior to version 0.1.21, XGrammar has an infinite recursion issue in the grammar. This issue has been resolved in version 0.1.21.

 https://cve.radiocsirt.org/vuln/ghsa-5cmr-4px5-23pc GHSA-5cmr-4px5-23pc — XGrammar affected by Denial of Service by infinite recursion grammars 2026-10-03T06:18:11.443139+00:00

Affected: PyPI: xgrammar

### Summary This issue: http://github.com/mlc-ai/xgrammar/issues/250 should have it's own security advisory. Since several tools accept and pass user supplied grammars to xgrammar, and it is so easy to trigger it seems like a High.