| Package | Affected versions | Patched versions |
|---|---|---|
| xgrammar | < 0.1.21 | 0.1.21 |
| xgrammar | < 0.1.21 | 0.1.21 |
This issue: http://github.com/mlc-ai/xgrammar/issues/250 should have it's own security advisory. Since several tools accept and pass user supplied grammars to xgrammar, and it is so easy to trigger it seems like a High.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free