CVSS 4.0
7.7 highCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:PCVE-2025-57809
High (7.7) in mlc-ai xgrammar. EPSS 0.5% chance of exploitation in the next 30 days. Fixed in xgrammar 0.1.21.
XGrammar is an open-source library for efficient, flexible, and portable structured generation. Prior to version 0.1.21, XGrammar has an infinite recursion issue in the grammar. This issue has been resolved in version 0.1.21.
Severity
CVSS 3.1
7.5 highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H- EPSS
- 0.5% chance of exploitation in the next 30 days; higher than 41% of CVEs (scores of 2026-10-31)
- CWE
- CWE-674
- Published
- Modified
- Record from
- the NVD, synced
Affected
- mlc-ai:xgrammar
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-5cmr-4px5-23pc | PyPI | xgrammar | <0.1.21 | 0.1.21 |
| PYSEC-2026-2054 | PyPI | xgrammar | <0.1.21 | 0.1.21 |