{"id":"CVE-2025-57809","summary":"XGrammar affected by Denial of Service by infinite recursion grammars","details":"XGrammar is an open-source library for efficient, flexible, and portable structured generation. Prior to version 0.1.21, XGrammar has an infinite recursion issue in the grammar. This issue has been resolved in version 0.1.21.","aliases":["GHSA-5cmr-4px5-23pc","PYSEC-2026-2054"],"modified":"2026-08-12T15:16:51.222485Z","published":"2025-08-25T21:22:00.226Z","database_specific":{"cwe_ids":["CWE-674"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/57xxx/CVE-2025-57809.json","cna_assigner":"GitHub_M"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/57xxx/CVE-2025-57809.json"},{"type":"ADVISORY","url":"https://github.com/mlc-ai/xgrammar/security/advisories/GHSA-5cmr-4px5-23pc"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-57809"},{"type":"REPORT","url":"https://github.com/mlc-ai/xgrammar/issues/250"},{"type":"FIX","url":"https://github.com/mlc-ai/xgrammar/commit/b943feacb5a1caf4d39de8ec3bf7c7ce066dcee5"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/mlc-ai/xgrammar","events":[{"introduced":"0"},{"fixed":"774867ce410ce1c5c7c10011cc0a9e20bd7894e2"},{"fixed":"b943feacb5a1caf4d39de8ec3bf7c7ce066dcee5"}],"database_specific":{"cpe":"cpe:2.3:a:mlc-ai:xgrammar:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"fixed":"0.1.21"}],"source":["CPE_RANGE","REFERENCES"]}}],"versions":["v0.1.19","v0.1.18","v0.1.16","v0.1.15","v0.1.14","v0.1.13","v0.1.12","v0.1.11","v0.1.10","v0.1.9"],"database_specific":{"vanir_signatures_modified":"2026-08-12T15:16:51Z","vanir_signatures":[{"id":"CVE-2025-57809-0726d608","signature_type":"Line","signature_version":"v1","source":"https://github.com/mlc-ai/xgrammar/commit/b943feacb5a1caf4d39de8ec3bf7c7ce066dcee5","target":{"file":"cpp/serialize_json.cc"},"deprecated":false,"digest":{"line_hashes":["331939194298769082245622961828909059566","230937548359454001110513599883068580921","62185781759232879052818948068423437680","88722934208722897998002501689771862880"],"threshold":0.9}},{"digest":{"function_hash":"74645861118382054446137133248869329492","length":1826},"id":"CVE-2025-57809-1c104743","signature_type":"Function","signature_version":"v1","source":"https://github.com/mlc-ai/xgrammar/commit/b943feacb5a1caf4d39de8ec3bf7c7ce066dcee5","target":{"function":"GrammarMatcher::Impl::FindJumpForwardString","file":"cpp/grammar_matcher.cc"},"deprecated":false},{"source":"https://github.com/mlc-ai/xgrammar/commit/b943feacb5a1caf4d39de8ec3bf7c7ce066dcee5","target":{"file":"cpp/fsm.cc"},"deprecated":false,"digest":{"line_hashes":["203783118370867555080232778799722749779","307404522159937255054086105458286104393","195315527026605362630023709160731121034","187100550877284555948475360433490093636"],"threshold":0.9},"id":"CVE-2025-57809-24d6e0c8","signature_type":"Line","signature_version":"v1"},{"source":"https://github.com/mlc-ai/xgrammar/commit/b943feacb5a1caf4d39de8ec3bf7c7ce066dcee5","target":{"file":"cpp/grammar_matcher.cc","function":"GrammarMatcher::Impl::FillNextTokenBitmask"},"deprecated":false,"digest":{"function_hash":"217570106123140354440182947828047341704","length":3237},"id":"CVE-2025-57809-4dd0ab41","signature_type":"Function","signature_version":"v1"},{"id":"CVE-2025-57809-5736ae89","signature_type":"Line","signature_version":"v1","source":"https://github.com/mlc-ai/xgrammar/commit/b943feacb5a1caf4d39de8ec3bf7c7ce066dcee5","target":{"file":"cpp/grammar_compiler.cc"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["134112430413152237775784420465780010326","185918501550301805754884400646215306804","142943302192183404298408600534968471595","112955183100609305066588552669183604494","106153680757977716555827626915183931164","119301671999107999134264351765899508314","110534278385052519335346449887502975296","201357331951417597704394637134269862541","264706264810595566003122710341890710407","218302060017740977817281292151058989640","177169766150232128674999957148728414027","254442977420927587586064192186115211708","131808155407481938776862610755026470833","175845510266185800165162588621741926186","334242723341361341022403370056418598751","107955278862967399015183396625079915807","163541321942617258758938634963256125926","137560799550034960515928932794418989701","112958788824128156081253725702590498217","193583238630724059471839920949526404575","277385380607113208539245569259150644567","5527325468056193922531669771002374229","183892742076906647172410457575694758678","161412791313551033035664523599216465486","241119403567090569191124826487976280816","163253419209005530149877825455488786709","179724470305086841415251659520224245460","311325335347227006174812965886262248509","85714462891290225746796158435278300891","174792567147621704703192668126177104368","279543872922269790585626994402149588889","51075461716989356190388942242265573848","84894361893934730983705280548667630409","247177781073682791840672231870445748807","313920412656115700360293950979845763554","247186414745261996066802701785699926172","93276441016668219731839411230910117911","16885426037187433558062230758341281387","243274240641099441672461221698010211880","333089868620894663341308311647427782290","116974951359244158685294365195127944668","80806876545059057656313788431873022417","84464742996990800820912874647101888729","199428448672455752462183485695589109780","98453452360633751435653875883575232940","249639868189594593173025667849217123729","205764648376944767986585555930197095060","134283184491861877601229530262013003474","535256252974196692088401828404151407","332467619491580352457941735315673632035","228773014453291074740884463435365692003","104505891279081043541962069310585346067","6660386206545351747195123833463731199","175069233374211815724626789881074915233","60415342911376216798867982218061842816","110694942559114699839561179809683441889","132042020577604684918133188987394780550","266531145897826625001310798241123757999","129788393436059309774011573557676905026","28752762122749735780284792654078614393","75149694379647118552699784558474785766","21085657361990493174294425179783497859","121016292738695342568532608517965920619","117866340451852075523590305993288370276","163375325651646617384446285079732046916","221149171388871557587113783195279837356","131322451695746379344139337133742586120","117331211594687522030445709868904900677","155866593357135533695406730079033316591","170932740838446478548163440553328112703","22561932970888152129926668996198787473","240101788995848838859573715913810895648","218659300775313491856837529891786145853","290435719099844591053999122839812566563","236130974685280090834716520700920822276","174091736082778063549269225144288830134","27459280646112828850404032302149109165","325063948066006684552005281410669554733","276165008169472421351287969755284618296","313472509920412065677031265811247359492","10212107417210455701667577965287095804","153341082687800030548257144344921598214","326655957204414491454082378016170318456","28685678013589199817123873315448692427","315814201955456441819213123957063709656","206504020455427397208901432762150584382","273841141134113013109368449326688844397","119850090699741542341866467543253461672","195043632538667599777569201108684432697","229196110412222216278624897628374911454","308159026216496797325307432151227490584","154295683973149887326538267762802141990","327198056488305339654976425889443147767","172729330458897073225864341089718923338","313557895656246428596679636404537628340","39301401326524871274203799835639834116","253832049342565719819623468764659943663","81301321855291526333915199651282433059","168428082206849678371271325058285752295","6127715936365495482100141654701531383","241405947753129884231569085355029811378","20801200067242668875539961297015989026","328403255717214172896006836490432451665","245349931530172219393062491162661068564","252305275159797344497397981521626672101","315135765809899305028390264262085862052","197630217233850348038343691659718277848","326826843612678443792297800896010919585","28712628448327618314338351976314072693","236469556874973307239230527820041394259","106160948735414527685066649671720866477","322565845630752524785383130792439649253","240855270941880214435285574554464298686","144310174631780882772763996598636384019","208992658131065611196295360768264927849","253817078266018924346558389855605657339","266745001646158226817859208399819550418","57213394521065070204205237913155908280","186155985217338774775356356139757710290","309632400593710841597579577214979453726","219961803321435297232869074014941629415","28172378493115879318711035251506051303","116969469084404911106926555648747432744","43600708640803208152464266199287174940","229132100379014848312395415090015037084","123565361699600904247087585068163156686","247321871508064289773433279715858209270","170544346814751977381280700397661058017","228624866601207323298451485428126340940","139770230809987689312455768972432456881","215871274697392744791629765266709694450","267024600200170556955282694010560605688","282141166917476590238225535505250257439","307383418916129913556930450251684636386","205718490674368634355759994850455392148","172929678530535680975288952503470454927","177577811566272342515911063421959601661","145051620879662201014049661418802485371","58623698304484605619160360393861999973","321975847832436893134001040010291970038","337937661807857764141321682095541025993","70719107565201674272702965936054419085","313939265988075007927228898625986013684","26552973765300186528609321161488994979","165996412180920144948614115377357169866","70996584310476387513395729923162726194","99424385404866712021951510598298694245","19149415470679392733686513895472183226","65805655444368082296994930986200071481","257133291454639299051973094136732596093","146427577598785527573525769944056169975","143547233628858349119172322306343030821","268301921633502600260990151249507002263","192173603199195273917837034617221360386","281846240357742570939531652615504987445","83237681140709844555167757793997332910","194172763676655071548347224735596940346","103335658238503698232031901103443250776","338362276185608722767480950738662393036","92764617829693652328095541282283432301","3280699447854957129085155952428100749","274677537519558723546747509864655492120","323368699116584569715317545539526464399","80142911268813657980016308100563714163","170243468037205895793351482081547179896","81471055634945877688873480762065609501","291780602966268987354927566894907132223","165157766551109212892488868433839508385","282176541907544215006237495785615538281","131003296363990352068258995366413316923","185844356624362470238406172455061137435","209479813552646994402081125101459883878","494095134041039595170031617141867958","223983941136188757840257897136299917168","49659852569408512166881865113856017899","137709927123834990742988045360157424191","20298296960470049821450369848139556925"]}},{"digest":{"function_hash":"141358270310618232741829417671012288423","length":919},"id":"CVE-2025-57809-60f2b30c","signature_type":"Function","signature_version":"v1","source":"https://github.com/mlc-ai/xgrammar/commit/b943feacb5a1caf4d39de8ec3bf7c7ce066dcee5","target":{"file":"cpp/grammar_matcher.cc","function":"GrammarMatcher::Impl::AcceptString"},"deprecated":false},{"deprecated":false,"digest":{"line_hashes":["145016335269027065861110717356952362864","280618073292272100346110366473771613913","184433542423649301880604014850799252021","332184867755418645682665806833488806355","149680090380312630207202569409790887115"],"threshold":0.9},"id":"CVE-2025-57809-6117b794","signature_type":"Line","signature_version":"v1","source":"https://github.com/mlc-ai/xgrammar/commit/b943feacb5a1caf4d39de8ec3bf7c7ce066dcee5","target":{"file":"tests/cpp/test_serialization.cc"}},{"signature_version":"v1","source":"https://github.com/mlc-ai/xgrammar/commit/b943feacb5a1caf4d39de8ec3bf7c7ce066dcee5","target":{"file":"cpp/grammar_matcher.cc","function":"GrammarMatcher::Impl::AcceptStopToken"},"deprecated":false,"digest":{"function_hash":"77967136099622545330739069066189595066","length":251},"id":"CVE-2025-57809-672f1ee4","signature_type":"Function"},{"source":"https://github.com/mlc-ai/xgrammar/commit/b943feacb5a1caf4d39de8ec3bf7c7ce066dcee5","target":{"file":"cpp/compiled_grammar_data_structure.h"},"deprecated":false,"digest":{"line_hashes":["315522184558186606759372806657242355562","129149779699734938669264718364746018547","56629081879123074019248558310330472403","276149848531023339084442954014126840561","138889542219970116988188872907799255309","130007906460447509524801262442872127794","259802649837744566385724782089856242898","93323159690441865871240165018438086462","252698778172329363253091930839648653727","124347615791289469991412519840435196831","47918418439524408662065523321379931750","266477286006616497029537262212567095441","176276090436409479332454610433716310917","309321125437981008796488902928922372354"],"threshold":0.9},"id":"CVE-2025-57809-6fd6052d","signature_type":"Line","signature_version":"v1"},{"deprecated":false,"digest":{"line_hashes":["38357878407368604275038396561971661582","28115091151329723292684263657904256957","299613317214161697206703887583947326273","336233480453521563098733462467542056101","280761788758141874201392824876361577988","231145266884900114530185987025650301708","145334777301617591072909504973078484071","105668638561961784944883972170540333578"],"threshold":0.9},"id":"CVE-2025-57809-8a759632","signature_type":"Line","signature_version":"v1","source":"https://github.com/mlc-ai/xgrammar/commit/b943feacb5a1caf4d39de8ec3bf7c7ce066dcee5","target":{"file":"cpp/tokenizer_info_impl.h"}},{"deprecated":false,"digest":{"function_hash":"97188865722847454048685527729646133792","length":768},"id":"CVE-2025-57809-913b6d45","signature_type":"Function","signature_version":"v1","source":"https://github.com/mlc-ai/xgrammar/commit/b943feacb5a1caf4d39de8ec3bf7c7ce066dcee5","target":{"function":"GrammarMatcherForTokenMaskCache::IsTokenPassLookaheadAssertion","file":"cpp/grammar_compiler.cc"}},{"deprecated":false,"digest":{"function_hash":"227849622026471133388618572745809639079","length":1990},"id":"CVE-2025-57809-a4b3ff78","signature_type":"Function","signature_version":"v1","source":"https://github.com/mlc-ai/xgrammar/commit/b943feacb5a1caf4d39de8ec3bf7c7ce066dcee5","target":{"file":"cpp/grammar_matcher.cc","function":"GrammarMatcher::Impl::AcceptToken"}},{"deprecated":false,"digest":{"function_hash":"143611756177648310652139697984671793003","length":3163},"id":"CVE-2025-57809-aef9e06f","signature_type":"Function","signature_version":"v1","source":"https://github.com/mlc-ai/xgrammar/commit/b943feacb5a1caf4d39de8ec3bf7c7ce066dcee5","target":{"file":"cpp/grammar_compiler.cc","function":"GrammarCompiler::Impl::MultiThreadCompileGrammar"}},{"digest":{"function_hash":"128467357704745323389393142650789198831","length":1898},"id":"CVE-2025-57809-b47365c9","signature_type":"Function","signature_version":"v1","source":"https://github.com/mlc-ai/xgrammar/commit/b943feacb5a1caf4d39de8ec3bf7c7ce066dcee5","target":{"file":"tests/cpp/test_serialization.cc","function":"TEST"},"deprecated":false},{"source":"https://github.com/mlc-ai/xgrammar/commit/b943feacb5a1caf4d39de8ec3bf7c7ce066dcee5","target":{"file":"include/xgrammar/tokenizer_info.h"},"deprecated":false,"digest":{"line_hashes":["7882473230084958462303261305781329677","191539316195380490459505770772367997628","110479326289420213388902113713960335844","11607036519822057342808368722768620398"],"threshold":0.9},"id":"CVE-2025-57809-b857cd71","signature_type":"Line","signature_version":"v1"},{"deprecated":false,"digest":{"line_hashes":["314109192469280966021848129492342893438","185416923453403441210922469719783762689","312750970183888925617434338535959283371","50705241189456386345955892632760795247","189404430160087156620265512635659638606","63844078606626248036952408393141632907","281346697221314059615305704750429878229","72396214930207935781588910174511812772","145990454700710475753862907915867801030","311603880782148209315807298093612633758","224070976085217403744666483085820032354","67486079005776107436111007103693522778","137821836842992513844754742506028655845","294572066428449938698409833728632400583","145009519441121625005046221210540428123","27845540147326814146473035393512848232","145568700187328286431268579498156721402","223881706051108648708449876174764629965","41563240664389784706198583572559809987","85688661847816001080706428126066025106","125212405183936826347447497375698743309"],"threshold":0.9},"id":"CVE-2025-57809-c3a4b4d7","signature_type":"Line","signature_version":"v1","source":"https://github.com/mlc-ai/xgrammar/commit/b943feacb5a1caf4d39de8ec3bf7c7ce066dcee5","target":{"file":"cpp/support/csr_array.h"}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/mlc-ai/xgrammar/commit/b943feacb5a1caf4d39de8ec3bf7c7ce066dcee5","target":{"file":"cpp/fsm.cc","function":"FSM::Impl::ToCompact"},"deprecated":false,"digest":{"function_hash":"221909747787182538205591935090883774072","length":266},"id":"CVE-2025-57809-d1009633"},{"source":"https://github.com/mlc-ai/xgrammar/commit/b943feacb5a1caf4d39de8ec3bf7c7ce066dcee5","target":{"file":"cpp/tokenizer_info.cc"},"deprecated":false,"digest":{"line_hashes":["196121535287295476893294108045013998001","129210337312309886881695887250783778535","98534858274785984377192088570461428639","126712939480040313125838867387436821075","274795427862715268302759458803742607937","64760787521281489262526722230596894819","211850789438365348013778300497574254397","273613477114237693170697672102942385749","243337183005507546757266240968130015298","64925249891900884153776758999366621623","61225879243560219064193981353620256301"],"threshold":0.9},"id":"CVE-2025-57809-dbf2a300","signature_type":"Line","signature_version":"v1"},{"id":"CVE-2025-57809-ee0b3277","signature_type":"Function","signature_version":"v1","source":"https://github.com/mlc-ai/xgrammar/commit/b943feacb5a1caf4d39de8ec3bf7c7ce066dcee5","target":{"file":"cpp/tokenizer_info.cc","function":"add_prefix_space_"},"deprecated":false,"digest":{"function_hash":"214857690482632125427767057095003297101","length":1137}},{"id":"CVE-2025-57809-ee7fe2d2","signature_type":"Line","signature_version":"v1","source":"https://github.com/mlc-ai/xgrammar/commit/b943feacb5a1caf4d39de8ec3bf7c7ce066dcee5","target":{"file":"cpp/grammar_matcher.cc"},"deprecated":false,"digest":{"line_hashes":["48487715086843256451456330157607990515","232678422994863520382306764376397664232","119746816191443693251439090131464737304","15270068456985688061071554481953540679","239143329954596634230206368741213638011","99302651548272871152335167953790384310","286293460803729459300285160076060141733","242611211400168230983301604072417547550","189168663881751730462889313180159581361","285416784680484266579825729273981192492","87694991778954787433158194543108742941","107212363808208417549954858462252012765","85402116832416315800072838050518212667","284981405360523507714423939021822598046","154514451727855156023979501008275588734","61952429535040569105052737082974346986","185096291056804986009729648483652777710","290169371345426297845668686851128184030","17409883688591481625902708874021687503","296900147470959215835831649639963077471","119629735608429708865937021970463149975","324171184446217095018846284276749509892","293047021728131322914947755838446339248","182541188219535019972371319809381586393","75702486463271224572658224869444493728","102540255091512886501337228702361183015","8789310064350370666189779784796823402","290255319878561340947713590484942897978","150209158480548639423949809394652832816","122190734946865854886908061693778233089","310382262169917841350951449508618918693","62946083203811052286373648995632675085","271400198022206625072785780746638930771","328690612698736911195143550263614805306","92959337151697316045390370506748086172","153362306958419365044220831707360672507","9917850849037876509318084475189576383","274202141756422725260919772615280225127","220915062684465634349146160108902452692","287816568645788342334558457301334521043","126480107988713911045433598476629402057","149699020837443176417878207065636680766","281476555264493647365084681671820634296","173949201030981800418378014659360702024","177170964464504400326579232604140413987","251570144632967080070892205030421281635","44883568429246777546641092336579587201","41527389223455013253050453015346271843","225614134993539664113191556111222459779","12588367092677324962972021517968575401","323755154032833303183020260855620755197","236320945566990530061446234315819505879","280737948076969321172999813163471091644","183977065796807350483674405425165139439","205599337626379074646022895560646992977","21095569693673934098145047196320929304","6721450929918750127354098906462333621","304196578677034659283566745780651716154","45413180673623541429170813434956278269","244038263054653470038644072052230520915","110323813793810944786888957403121844714","183047020070821405734667487823618833668","59517292402561880347360735327959809790","229323047043698760294087086505739736055","263502393233505514843764502293440883638","272199033182853510691333547868902419615","312036662113232470022122929040004271031","48126974119679983046664214591398186643","91784455688894601696730914125707291773","209644860935145055560409101214365614638","135064436942771082755930296569393305370","246328121334559094150419440744766458227","313350726384495304648923394256731325410","58895244130247131628504548262928931921","256321144624265006019788831951725880852","98822730624304459385022670947974715346","74742454872098056358770162964477758961","52166109045068879551582864211763487708","30883662082330287127815446215266971031","248601037738886874523898752307407412218","7645649304513795711687330389446306869","172513055258398497615920837128140943967","107231826723281256270216619189911686968","163264769303771234446211583268240665082","48126974119679983046664214591398186643","91784455688894601696730914125707291773","317477712606393989962097136759018871445","95340752226031919102020841172016307941","90313702088049098688010525101429973853","112381961552262727627633025506236511232","80698275076376168509401251369069575750","132362950917495748879723104534184189078","303913364696597639214110515597608877712","77914544959072138263558515629320676840","103874001667129070505570165781047278542","12827298464425440082021636438587236958","31349617427842416462907215547803929530","23028504519443197138263156426683015936","78422055181408105619688087939654059463","54551370314271675034059014841530014231","295794832271715899799826187850838084355","94816860955602973789541084378487287818","236156988860173043758166456218760343331","199209514086715950172069497408235004191","2252584432475423245612845051416463244","60448971380265677949515452358043573606","201072520162592352865737392510322091350","20147486168198350322853109992362968762","93139900131991744113560545108901885179","298183080400538483956305871535991776239","245959856517728520501095972733064928700","261756224873027174571229707281700795594","8780082645190898449470445734895159281","163681443141813933493874539652971899107","58482886637287939730428586945108731666","181098778769742545803185640417693206727","123876355481918964050795832914592595559","48715111995320805935006741988266596318","189302565212541069516635742568727246289","295295048463970449832485891450836191687","260796503409255004886455576892898453353","10038105962396925879456665599734148692","307854102130278959365268394257856384810","36627655116159713222056563167681606397","73795920164081109499307201905126816857","178059352669531679845301690635266558198","181404838091464039027410018670054940061","26419140798602836349997994094813950150","9483659753176867157357045164554137765","87587840311489199529117370265295083462","257385333302580934915074801907144517755","143003949689918221294732983338781581254","15451162611528740090430115099856917138","306300117370591536512878435895161862652","294672997140515927959701049808145953541","218659300775313491856837529891786145853","179652452993314189760152521903354609000","97478976706036208031565052139756040000","160910890177480596338696225642763100465","105411060833297390007734242445122974964","167314262393018760048037654802340383437","318857525450699810351374240219322443800","334423147895275162220662530788039346028","80091557369425490342977064885999745244","239717703121495742731681519434422657603","123225120657834233282749550609271223495","240669136485334997987712300440021589430","312513385096520403832540156300478581337","170860950685180520190787687059998207959","10949972047402473483335892342631111965","91738946374681039734953790449023290244","243745684073231730577415195520843450427","18572104497938003203662004129262647087","52990717801497413529945921416513424786","11550586086104255828183685673923597170","123720535338994561470990533872547104014","309987879740817918814825101338438678902","208788349567762862965650625488978228503","87734971793870739936613080945516910790","287148697129723457383936559123933429982","83135851326549955032119295003823453690","309547472866580467962956645841305614459","189775693922278510239583147261279999764","95496482893590010057472904403186975458","85524557701896099994239675729680851327","248464995374614531646523708914841569010","305344667458337385649538662724243696766","13244311536521848239675024090578389863","58569938258156024464304929273584634785","194833005517828193735877327470071752051","161387870319028704431324991117404669394","233748439239124889518396184579959384851","44708571250967568052107884626005253005","222577491033882754701271057741489503949","52780402607298371795382551416674852677","229997791224647213445351826573536987027","68673064176132946011651921613261386010","178578827219410062284900432150398004108","285354666679775779125957555242865684800","140727833306772633529097894507391933219","330341008342165227870361356028704994310","243771357955771358580714337634921860187","44836692168876700716777139414161508136","166830994207730528343846333446476734434","327897929742509594614844983180942293272","215286692467118528030986407291715514888","282708376213785237324652761133891607040","179204676122481519554713024991006607582","339562712899896814295483766677939263977","75716330145594268264420960116830233460","196402187035981997727135544489713674465","317214891577849651685669184647339216163","26379146264324479570077555924758515371","284500985672296695293096301709345932233","184805749700815390571526442684426572079","271686808571650270288946955866464250063","76269402977515984497563034031446365313","75407180318704451699303769443305508093","216801050154272981606793843783959387447","94194799814889799719356257883079975675","192267551574479440427959479501207047603","142558793649531637346927553063514974725","52685745474765234721056098294155640113","112351879285554627198160451886316622900","234368617731437346552834758587730252045","148516411554264848665854603500476601944","143577122817573323904252802417999957784","163045453850741914143826528881703305063","88209837121812240995386754771138986421","320237201303620751913608466579542384498","189670009725514158520104935852313008130","138567499050403081838070856833887014486","186920187989081255025840227920533131086","57304112013728871303917219518830249482","38303288718350412979669910325841869443","60567083841005621204484052978062064664","4037230827526415508363716703444022879","298824325839011387307719475630311986657","288807121030424790556898883636272690041","43671333414928399673760037645171741697","125864459227843803583590930930535295039"],"threshold":0.9}},{"deprecated":false,"digest":{"function_hash":"194359677238464911985903179519392870211","length":122},"id":"CVE-2025-57809-f5008ece","signature_type":"Function","signature_version":"v1","source":"https://github.com/mlc-ai/xgrammar/commit/b943feacb5a1caf4d39de8ec3bf7c7ce066dcee5","target":{"function":"GrammarMatcher::Impl::IsStopTokenAccepted","file":"cpp/grammar_matcher.cc"}}],"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-57809.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P"}]}