CVE-2025-57809
- Source
- https://cve.org/CVERecord?id=CVE-2025-57809
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-57809.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2025-57809
- Aliases
- Published
- 2025-08-25T21:22:00Z
- Modified
- 2026-08-12T15:16:51Z
- Severity
-
- 7.7 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P CVSS Calculator
- Summary
- XGrammar affected by Denial of Service by infinite recursion grammars
- Details
-
XGrammar is an open-source library for efficient, flexible, and portable structured generation. Prior to version 0.1.21, XGrammar has an infinite recursion issue in the grammar. This issue has been resolved in version 0.1.21.
- Database specific
{ "cna_assigner": "GitHub_M", "cwe_ids": [ "CWE-674" ], "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/57xxx/CVE-2025-57809.json" }- References
-
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/57xxx/CVE-2025-57809.json
- https://github.com/mlc-ai/xgrammar/security/advisories/GHSA-5cmr-4px5-23pc
- https://nvd.nist.gov/vuln/detail/CVE-2025-57809
- https://github.com/mlc-ai/xgrammar/issues/250
- https://github.com/mlc-ai/xgrammar/commit/b943feacb5a1caf4d39de8ec3bf7c7ce066dcee5
Affected packages
Git / github.com/mlc-ai/xgrammar
Affected ranges
- Type
- GIT
- Repo
- https://github.com/mlc-ai/xgrammar
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixedFixed
- Database specific
-
Show details
{ "cpe": "cpe:2.3:a:mlc-ai:xgrammar:*:*:*:*:*:*:*:*", "extracted_events": [ { "introduced": "0" }, { "fixed": "0.1.21" } ], "source": [ "CPE_RANGE", "REFERENCES" ] }
Affected versions
v0.*
v0.1.10
v0.1.11
v0.1.12
v0.1.13
v0.1.14
v0.1.15
v0.1.16
v0.1.18
v0.1.19
v0.1.9
Database specific
source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-57809.json"
vanir_signatures
[
{
"deprecated": false,
"digest": {
"line_hashes": [
"331939194298769082245622961828909059566",
"230937548359454001110513599883068580921",
"62185781759232879052818948068423437680",
"88722934208722897998002501689771862880"
],
"threshold": 0.9
},
"id": "CVE-2025-57809-0726d608",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/mlc-ai/xgrammar/commit/b943feacb5a1caf4d39de8ec3bf7c7ce066dcee5",
"target": {
"file": "cpp/serialize_json.cc"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "74645861118382054446137133248869329492",
"length": 1826
},
"id": "CVE-2025-57809-1c104743",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/mlc-ai/xgrammar/commit/b943feacb5a1caf4d39de8ec3bf7c7ce066dcee5",
"target": {
"file": "cpp/grammar_matcher.cc",
"function": "GrammarMatcher::Impl::FindJumpForwardString"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"203783118370867555080232778799722749779",
"307404522159937255054086105458286104393",
"195315527026605362630023709160731121034",
"187100550877284555948475360433490093636"
],
"threshold": 0.9
},
"id": "CVE-2025-57809-24d6e0c8",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/mlc-ai/xgrammar/commit/b943feacb5a1caf4d39de8ec3bf7c7ce066dcee5",
"target": {
"file": "cpp/fsm.cc"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "217570106123140354440182947828047341704",
"length": 3237
},
"id": "CVE-2025-57809-4dd0ab41",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/mlc-ai/xgrammar/commit/b943feacb5a1caf4d39de8ec3bf7c7ce066dcee5",
"target": {
"file": "cpp/grammar_matcher.cc",
"function": "GrammarMatcher::Impl::FillNextTokenBitmask"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"134112430413152237775784420465780010326",
"185918501550301805754884400646215306804",
"142943302192183404298408600534968471595",
"112955183100609305066588552669183604494",
"106153680757977716555827626915183931164",
"119301671999107999134264351765899508314",
"110534278385052519335346449887502975296",
"201357331951417597704394637134269862541",
"264706264810595566003122710341890710407",
"218302060017740977817281292151058989640",
"177169766150232128674999957148728414027",
"254442977420927587586064192186115211708",
"131808155407481938776862610755026470833",
"175845510266185800165162588621741926186",
"334242723341361341022403370056418598751",
"107955278862967399015183396625079915807",
"163541321942617258758938634963256125926",
"137560799550034960515928932794418989701",
"112958788824128156081253725702590498217",
"193583238630724059471839920949526404575",
"277385380607113208539245569259150644567",
"5527325468056193922531669771002374229",
"183892742076906647172410457575694758678",
"161412791313551033035664523599216465486",
"241119403567090569191124826487976280816",
"163253419209005530149877825455488786709",
"179724470305086841415251659520224245460",
"311325335347227006174812965886262248509",
"85714462891290225746796158435278300891",
"174792567147621704703192668126177104368",
"279543872922269790585626994402149588889",
"51075461716989356190388942242265573848",
"84894361893934730983705280548667630409",
"247177781073682791840672231870445748807",
"313920412656115700360293950979845763554",
"247186414745261996066802701785699926172",
"93276441016668219731839411230910117911",
"16885426037187433558062230758341281387",
"243274240641099441672461221698010211880",
"333089868620894663341308311647427782290",
"116974951359244158685294365195127944668",
"80806876545059057656313788431873022417",
"84464742996990800820912874647101888729",
"199428448672455752462183485695589109780",
"98453452360633751435653875883575232940",
"249639868189594593173025667849217123729",
"205764648376944767986585555930197095060",
"134283184491861877601229530262013003474",
"535256252974196692088401828404151407",
"332467619491580352457941735315673632035",
"228773014453291074740884463435365692003",
"104505891279081043541962069310585346067",
"6660386206545351747195123833463731199",
"175069233374211815724626789881074915233",
"60415342911376216798867982218061842816",
"110694942559114699839561179809683441889",
"132042020577604684918133188987394780550",
"266531145897826625001310798241123757999",
"129788393436059309774011573557676905026",
"28752762122749735780284792654078614393",
"75149694379647118552699784558474785766",
"21085657361990493174294425179783497859",
"121016292738695342568532608517965920619",
"117866340451852075523590305993288370276",
"163375325651646617384446285079732046916",
"221149171388871557587113783195279837356",
"131322451695746379344139337133742586120",
"117331211594687522030445709868904900677",
"155866593357135533695406730079033316591",
"170932740838446478548163440553328112703",
"22561932970888152129926668996198787473",
"240101788995848838859573715913810895648",
"218659300775313491856837529891786145853",
"290435719099844591053999122839812566563",
"236130974685280090834716520700920822276",
"174091736082778063549269225144288830134",
"27459280646112828850404032302149109165",
"325063948066006684552005281410669554733",
"276165008169472421351287969755284618296",
"313472509920412065677031265811247359492",
"10212107417210455701667577965287095804",
"153341082687800030548257144344921598214",
"326655957204414491454082378016170318456",
"28685678013589199817123873315448692427",
"315814201955456441819213123957063709656",
"206504020455427397208901432762150584382",
"273841141134113013109368449326688844397",
"119850090699741542341866467543253461672",
"195043632538667599777569201108684432697",
"229196110412222216278624897628374911454",
"308159026216496797325307432151227490584",
"154295683973149887326538267762802141990",
"327198056488305339654976425889443147767",
"172729330458897073225864341089718923338",
"313557895656246428596679636404537628340",
"39301401326524871274203799835639834116",
"253832049342565719819623468764659943663",
"81301321855291526333915199651282433059",
"168428082206849678371271325058285752295",
"6127715936365495482100141654701531383",
"241405947753129884231569085355029811378",
"20801200067242668875539961297015989026",
"328403255717214172896006836490432451665",
"245349931530172219393062491162661068564",
"252305275159797344497397981521626672101",
"315135765809899305028390264262085862052",
"197630217233850348038343691659718277848",
"326826843612678443792297800896010919585",
"28712628448327618314338351976314072693",
"236469556874973307239230527820041394259",
"106160948735414527685066649671720866477",
"322565845630752524785383130792439649253",
"240855270941880214435285574554464298686",
"144310174631780882772763996598636384019",
"208992658131065611196295360768264927849",
"253817078266018924346558389855605657339",
"266745001646158226817859208399819550418",
"57213394521065070204205237913155908280",
"186155985217338774775356356139757710290",
"309632400593710841597579577214979453726",
"219961803321435297232869074014941629415",
"28172378493115879318711035251506051303",
"116969469084404911106926555648747432744",
"43600708640803208152464266199287174940",
"229132100379014848312395415090015037084",
"123565361699600904247087585068163156686",
"247321871508064289773433279715858209270",
"170544346814751977381280700397661058017",
"228624866601207323298451485428126340940",
"139770230809987689312455768972432456881",
"215871274697392744791629765266709694450",
"267024600200170556955282694010560605688",
"282141166917476590238225535505250257439",
"307383418916129913556930450251684636386",
"205718490674368634355759994850455392148",
"172929678530535680975288952503470454927",
"177577811566272342515911063421959601661",
"145051620879662201014049661418802485371",
"58623698304484605619160360393861999973",
"321975847832436893134001040010291970038",
"337937661807857764141321682095541025993",
"70719107565201674272702965936054419085",
"313939265988075007927228898625986013684",
"26552973765300186528609321161488994979",
"165996412180920144948614115377357169866",
"70996584310476387513395729923162726194",
"99424385404866712021951510598298694245",
"19149415470679392733686513895472183226",
"65805655444368082296994930986200071481",
"257133291454639299051973094136732596093",
"146427577598785527573525769944056169975",
"143547233628858349119172322306343030821",
"268301921633502600260990151249507002263",
"192173603199195273917837034617221360386",
"281846240357742570939531652615504987445",
"83237681140709844555167757793997332910",
"194172763676655071548347224735596940346",
"103335658238503698232031901103443250776",
"338362276185608722767480950738662393036",
"92764617829693652328095541282283432301",
"3280699447854957129085155952428100749",
"274677537519558723546747509864655492120",
"323368699116584569715317545539526464399",
"80142911268813657980016308100563714163",
"170243468037205895793351482081547179896",
"81471055634945877688873480762065609501",
"291780602966268987354927566894907132223",
"165157766551109212892488868433839508385",
"282176541907544215006237495785615538281",
"131003296363990352068258995366413316923",
"185844356624362470238406172455061137435",
"209479813552646994402081125101459883878",
"494095134041039595170031617141867958",
"223983941136188757840257897136299917168",
"49659852569408512166881865113856017899",
"137709927123834990742988045360157424191",
"20298296960470049821450369848139556925"
],
"threshold": 0.9
},
"id": "CVE-2025-57809-5736ae89",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/mlc-ai/xgrammar/commit/b943feacb5a1caf4d39de8ec3bf7c7ce066dcee5",
"target": {
"file": "cpp/grammar_compiler.cc"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "141358270310618232741829417671012288423",
"length": 919
},
"id": "CVE-2025-57809-60f2b30c",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/mlc-ai/xgrammar/commit/b943feacb5a1caf4d39de8ec3bf7c7ce066dcee5",
"target": {
"file": "cpp/grammar_matcher.cc",
"function": "GrammarMatcher::Impl::AcceptString"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"145016335269027065861110717356952362864",
"280618073292272100346110366473771613913",
"184433542423649301880604014850799252021",
"332184867755418645682665806833488806355",
"149680090380312630207202569409790887115"
],
"threshold": 0.9
},
"id": "CVE-2025-57809-6117b794",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/mlc-ai/xgrammar/commit/b943feacb5a1caf4d39de8ec3bf7c7ce066dcee5",
"target": {
"file": "tests/cpp/test_serialization.cc"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "77967136099622545330739069066189595066",
"length": 251
},
"id": "CVE-2025-57809-672f1ee4",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/mlc-ai/xgrammar/commit/b943feacb5a1caf4d39de8ec3bf7c7ce066dcee5",
"target": {
"file": "cpp/grammar_matcher.cc",
"function": "GrammarMatcher::Impl::AcceptStopToken"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"315522184558186606759372806657242355562",
"129149779699734938669264718364746018547",
"56629081879123074019248558310330472403",
"276149848531023339084442954014126840561",
"138889542219970116988188872907799255309",
"130007906460447509524801262442872127794",
"259802649837744566385724782089856242898",
"93323159690441865871240165018438086462",
"252698778172329363253091930839648653727",
"124347615791289469991412519840435196831",
"47918418439524408662065523321379931750",
"266477286006616497029537262212567095441",
"176276090436409479332454610433716310917",
"309321125437981008796488902928922372354"
],
"threshold": 0.9
},
"id": "CVE-2025-57809-6fd6052d",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/mlc-ai/xgrammar/commit/b943feacb5a1caf4d39de8ec3bf7c7ce066dcee5",
"target": {
"file": "cpp/compiled_grammar_data_structure.h"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"38357878407368604275038396561971661582",
"28115091151329723292684263657904256957",
"299613317214161697206703887583947326273",
"336233480453521563098733462467542056101",
"280761788758141874201392824876361577988",
"231145266884900114530185987025650301708",
"145334777301617591072909504973078484071",
"105668638561961784944883972170540333578"
],
"threshold": 0.9
},
"id": "CVE-2025-57809-8a759632",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/mlc-ai/xgrammar/commit/b943feacb5a1caf4d39de8ec3bf7c7ce066dcee5",
"target": {
"file": "cpp/tokenizer_info_impl.h"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "97188865722847454048685527729646133792",
"length": 768
},
"id": "CVE-2025-57809-913b6d45",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/mlc-ai/xgrammar/commit/b943feacb5a1caf4d39de8ec3bf7c7ce066dcee5",
"target": {
"file": "cpp/grammar_compiler.cc",
"function": "GrammarMatcherForTokenMaskCache::IsTokenPassLookaheadAssertion"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "227849622026471133388618572745809639079",
"length": 1990
},
"id": "CVE-2025-57809-a4b3ff78",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/mlc-ai/xgrammar/commit/b943feacb5a1caf4d39de8ec3bf7c7ce066dcee5",
"target": {
"file": "cpp/grammar_matcher.cc",
"function": "GrammarMatcher::Impl::AcceptToken"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "143611756177648310652139697984671793003",
"length": 3163
},
"id": "CVE-2025-57809-aef9e06f",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/mlc-ai/xgrammar/commit/b943feacb5a1caf4d39de8ec3bf7c7ce066dcee5",
"target": {
"file": "cpp/grammar_compiler.cc",
"function": "GrammarCompiler::Impl::MultiThreadCompileGrammar"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "128467357704745323389393142650789198831",
"length": 1898
},
"id": "CVE-2025-57809-b47365c9",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/mlc-ai/xgrammar/commit/b943feacb5a1caf4d39de8ec3bf7c7ce066dcee5",
"target": {
"file": "tests/cpp/test_serialization.cc",
"function": "TEST"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"7882473230084958462303261305781329677",
"191539316195380490459505770772367997628",
"110479326289420213388902113713960335844",
"11607036519822057342808368722768620398"
],
"threshold": 0.9
},
"id": "CVE-2025-57809-b857cd71",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/mlc-ai/xgrammar/commit/b943feacb5a1caf4d39de8ec3bf7c7ce066dcee5",
"target": {
"file": "include/xgrammar/tokenizer_info.h"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"314109192469280966021848129492342893438",
"185416923453403441210922469719783762689",
"312750970183888925617434338535959283371",
"50705241189456386345955892632760795247",
"189404430160087156620265512635659638606",
"63844078606626248036952408393141632907",
"281346697221314059615305704750429878229",
"72396214930207935781588910174511812772",
"145990454700710475753862907915867801030",
"311603880782148209315807298093612633758",
"224070976085217403744666483085820032354",
"67486079005776107436111007103693522778",
"137821836842992513844754742506028655845",
"294572066428449938698409833728632400583",
"145009519441121625005046221210540428123",
"27845540147326814146473035393512848232",
"145568700187328286431268579498156721402",
"223881706051108648708449876174764629965",
"41563240664389784706198583572559809987",
"85688661847816001080706428126066025106",
"125212405183936826347447497375698743309"
],
"threshold": 0.9
},
"id": "CVE-2025-57809-c3a4b4d7",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/mlc-ai/xgrammar/commit/b943feacb5a1caf4d39de8ec3bf7c7ce066dcee5",
"target": {
"file": "cpp/support/csr_array.h"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "221909747787182538205591935090883774072",
"length": 266
},
"id": "CVE-2025-57809-d1009633",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/mlc-ai/xgrammar/commit/b943feacb5a1caf4d39de8ec3bf7c7ce066dcee5",
"target": {
"file": "cpp/fsm.cc",
"function": "FSM::Impl::ToCompact"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"196121535287295476893294108045013998001",
"129210337312309886881695887250783778535",
"98534858274785984377192088570461428639",
"126712939480040313125838867387436821075",
"274795427862715268302759458803742607937",
"64760787521281489262526722230596894819",
"211850789438365348013778300497574254397",
"273613477114237693170697672102942385749",
"243337183005507546757266240968130015298",
"64925249891900884153776758999366621623",
"61225879243560219064193981353620256301"
],
"threshold": 0.9
},
"id": "CVE-2025-57809-dbf2a300",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/mlc-ai/xgrammar/commit/b943feacb5a1caf4d39de8ec3bf7c7ce066dcee5",
"target": {
"file": "cpp/tokenizer_info.cc"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "214857690482632125427767057095003297101",
"length": 1137
},
"id": "CVE-2025-57809-ee0b3277",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/mlc-ai/xgrammar/commit/b943feacb5a1caf4d39de8ec3bf7c7ce066dcee5",
"target": {
"file": "cpp/tokenizer_info.cc",
"function": "add_prefix_space_"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"48487715086843256451456330157607990515",
"232678422994863520382306764376397664232",
"119746816191443693251439090131464737304",
"15270068456985688061071554481953540679",
"239143329954596634230206368741213638011",
"99302651548272871152335167953790384310",
"286293460803729459300285160076060141733",
"242611211400168230983301604072417547550",
"189168663881751730462889313180159581361",
"285416784680484266579825729273981192492",
"87694991778954787433158194543108742941",
"107212363808208417549954858462252012765",
"85402116832416315800072838050518212667",
"284981405360523507714423939021822598046",
"154514451727855156023979501008275588734",
"61952429535040569105052737082974346986",
"185096291056804986009729648483652777710",
"290169371345426297845668686851128184030",
"17409883688591481625902708874021687503",
"296900147470959215835831649639963077471",
"119629735608429708865937021970463149975",
"324171184446217095018846284276749509892",
"293047021728131322914947755838446339248",
"182541188219535019972371319809381586393",
"75702486463271224572658224869444493728",
"102540255091512886501337228702361183015",
"8789310064350370666189779784796823402",
"290255319878561340947713590484942897978",
"150209158480548639423949809394652832816",
"122190734946865854886908061693778233089",
"310382262169917841350951449508618918693",
"62946083203811052286373648995632675085",
"271400198022206625072785780746638930771",
"328690612698736911195143550263614805306",
"92959337151697316045390370506748086172",
"153362306958419365044220831707360672507",
"9917850849037876509318084475189576383",
"274202141756422725260919772615280225127",
"220915062684465634349146160108902452692",
"287816568645788342334558457301334521043",
"126480107988713911045433598476629402057",
"149699020837443176417878207065636680766",
"281476555264493647365084681671820634296",
"173949201030981800418378014659360702024",
"177170964464504400326579232604140413987",
"251570144632967080070892205030421281635",
"44883568429246777546641092336579587201",
"41527389223455013253050453015346271843",
"225614134993539664113191556111222459779",
"12588367092677324962972021517968575401",
"323755154032833303183020260855620755197",
"236320945566990530061446234315819505879",
"280737948076969321172999813163471091644",
"183977065796807350483674405425165139439",
"205599337626379074646022895560646992977",
"21095569693673934098145047196320929304",
"6721450929918750127354098906462333621",
"304196578677034659283566745780651716154",
"45413180673623541429170813434956278269",
"244038263054653470038644072052230520915",
"110323813793810944786888957403121844714",
"183047020070821405734667487823618833668",
"59517292402561880347360735327959809790",
"229323047043698760294087086505739736055",
"263502393233505514843764502293440883638",
"272199033182853510691333547868902419615",
"312036662113232470022122929040004271031",
"48126974119679983046664214591398186643",
"91784455688894601696730914125707291773",
"209644860935145055560409101214365614638",
"135064436942771082755930296569393305370",
"246328121334559094150419440744766458227",
"313350726384495304648923394256731325410",
"58895244130247131628504548262928931921",
"256321144624265006019788831951725880852",
"98822730624304459385022670947974715346",
"74742454872098056358770162964477758961",
"52166109045068879551582864211763487708",
"30883662082330287127815446215266971031",
"248601037738886874523898752307407412218",
"7645649304513795711687330389446306869",
"172513055258398497615920837128140943967",
"107231826723281256270216619189911686968",
"163264769303771234446211583268240665082",
"48126974119679983046664214591398186643",
"91784455688894601696730914125707291773",
"317477712606393989962097136759018871445",
"95340752226031919102020841172016307941",
"90313702088049098688010525101429973853",
"112381961552262727627633025506236511232",
"80698275076376168509401251369069575750",
"132362950917495748879723104534184189078",
"303913364696597639214110515597608877712",
"77914544959072138263558515629320676840",
"103874001667129070505570165781047278542",
"12827298464425440082021636438587236958",
"31349617427842416462907215547803929530",
"23028504519443197138263156426683015936",
"78422055181408105619688087939654059463",
"54551370314271675034059014841530014231",
"295794832271715899799826187850838084355",
"94816860955602973789541084378487287818",
"236156988860173043758166456218760343331",
"199209514086715950172069497408235004191",
"2252584432475423245612845051416463244",
"60448971380265677949515452358043573606",
"201072520162592352865737392510322091350",
"20147486168198350322853109992362968762",
"93139900131991744113560545108901885179",
"298183080400538483956305871535991776239",
"245959856517728520501095972733064928700",
"261756224873027174571229707281700795594",
"8780082645190898449470445734895159281",
"163681443141813933493874539652971899107",
"58482886637287939730428586945108731666",
"181098778769742545803185640417693206727",
"123876355481918964050795832914592595559",
"48715111995320805935006741988266596318",
"189302565212541069516635742568727246289",
"295295048463970449832485891450836191687",
"260796503409255004886455576892898453353",
"10038105962396925879456665599734148692",
"307854102130278959365268394257856384810",
"36627655116159713222056563167681606397",
"73795920164081109499307201905126816857",
"178059352669531679845301690635266558198",
"181404838091464039027410018670054940061",
"26419140798602836349997994094813950150",
"9483659753176867157357045164554137765",
"87587840311489199529117370265295083462",
"257385333302580934915074801907144517755",
"143003949689918221294732983338781581254",
"15451162611528740090430115099856917138",
"306300117370591536512878435895161862652",
"294672997140515927959701049808145953541",
"218659300775313491856837529891786145853",
"179652452993314189760152521903354609000",
"97478976706036208031565052139756040000",
"160910890177480596338696225642763100465",
"105411060833297390007734242445122974964",
"167314262393018760048037654802340383437",
"318857525450699810351374240219322443800",
"334423147895275162220662530788039346028",
"80091557369425490342977064885999745244",
"239717703121495742731681519434422657603",
"123225120657834233282749550609271223495",
"240669136485334997987712300440021589430",
"312513385096520403832540156300478581337",
"170860950685180520190787687059998207959",
"10949972047402473483335892342631111965",
"91738946374681039734953790449023290244",
"243745684073231730577415195520843450427",
"18572104497938003203662004129262647087",
"52990717801497413529945921416513424786",
"11550586086104255828183685673923597170",
"123720535338994561470990533872547104014",
"309987879740817918814825101338438678902",
"208788349567762862965650625488978228503",
"87734971793870739936613080945516910790",
"287148697129723457383936559123933429982",
"83135851326549955032119295003823453690",
"309547472866580467962956645841305614459",
"189775693922278510239583147261279999764",
"95496482893590010057472904403186975458",
"85524557701896099994239675729680851327",
"248464995374614531646523708914841569010",
"305344667458337385649538662724243696766",
"13244311536521848239675024090578389863",
"58569938258156024464304929273584634785",
"194833005517828193735877327470071752051",
"161387870319028704431324991117404669394",
"233748439239124889518396184579959384851",
"44708571250967568052107884626005253005",
"222577491033882754701271057741489503949",
"52780402607298371795382551416674852677",
"229997791224647213445351826573536987027",
"68673064176132946011651921613261386010",
"178578827219410062284900432150398004108",
"285354666679775779125957555242865684800",
"140727833306772633529097894507391933219",
"330341008342165227870361356028704994310",
"243771357955771358580714337634921860187",
"44836692168876700716777139414161508136",
"166830994207730528343846333446476734434",
"327897929742509594614844983180942293272",
"215286692467118528030986407291715514888",
"282708376213785237324652761133891607040",
"179204676122481519554713024991006607582",
"339562712899896814295483766677939263977",
"75716330145594268264420960116830233460",
"196402187035981997727135544489713674465",
"317214891577849651685669184647339216163",
"26379146264324479570077555924758515371",
"284500985672296695293096301709345932233",
"184805749700815390571526442684426572079",
"271686808571650270288946955866464250063",
"76269402977515984497563034031446365313",
"75407180318704451699303769443305508093",
"216801050154272981606793843783959387447",
"94194799814889799719356257883079975675",
"192267551574479440427959479501207047603",
"142558793649531637346927553063514974725",
"52685745474765234721056098294155640113",
"112351879285554627198160451886316622900",
"234368617731437346552834758587730252045",
"148516411554264848665854603500476601944",
"143577122817573323904252802417999957784",
"163045453850741914143826528881703305063",
"88209837121812240995386754771138986421",
"320237201303620751913608466579542384498",
"189670009725514158520104935852313008130",
"138567499050403081838070856833887014486",
"186920187989081255025840227920533131086",
"57304112013728871303917219518830249482",
"38303288718350412979669910325841869443",
"60567083841005621204484052978062064664",
"4037230827526415508363716703444022879",
"298824325839011387307719475630311986657",
"288807121030424790556898883636272690041",
"43671333414928399673760037645171741697",
"125864459227843803583590930930535295039"
],
"threshold": 0.9
},
"id": "CVE-2025-57809-ee7fe2d2",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/mlc-ai/xgrammar/commit/b943feacb5a1caf4d39de8ec3bf7c7ce066dcee5",
"target": {
"file": "cpp/grammar_matcher.cc"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "194359677238464911985903179519392870211",
"length": 122
},
"id": "CVE-2025-57809-f5008ece",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/mlc-ai/xgrammar/commit/b943feacb5a1caf4d39de8ec3bf7c7ce066dcee5",
"target": {
"file": "cpp/grammar_matcher.cc",
"function": "GrammarMatcher::Impl::IsStopTokenAccepted"
}
}
]
vanir_signatures_modified
"2026-08-12T15:16:51Z"