CVE-2025-32381

Name of the Vulnerable Software and Affected Versions: XGrammar versions prior to 0.1.18

Description: The issue concerns an unbounded cache for compiled grammars in memory, which can be exploited to cause a denial of service by filling up a host's memory. This can occur when a system using XGrammar receives many small requests with unique JSON schemas, such as sending multiple requests to an LLM inference server.

Recommendations: For versions prior to 0.1.18, update to version 0.1.18 to resolve the issue.