Denial of Service Risk in XGrammar Open-Source Library

CVE-2025-32381

What is CVE-2025-32381?

XGrammar, an open-source library designed for efficient and flexible structured generation, contains a vulnerability that poses a significant Denial of Service risk. Prior to version 0.1.18, XGrammar maintains a memory cache for compiled grammars to enhance performance during repeated use. This cache is unbounded, leading to the potential for exploitation where an attacker can deliberately send numerous small requests with unique JSON schemas to a system utilizing XGrammar. Such actions can fill the host's memory, resulting in service disruption. Users are urged to upgrade to version 0.1.18 or later to mitigate this risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References