Vulnerability in Moyangzhan Langchain4j-Aideepin

CVE-2025-21604

LangChain4j-AIDeepin is a Retrieval enhancement generation (RAG) project. Prior to 3.5.0, LangChain4j-AIDeepin uses MD5 to hash files, which may cause file upload conflicts. This issue is fixed in 3.5.0.

EPSS: 0.003 (16.8th percentile) — read the EPSS interpretation.

Affected products

Moyangzhan Langchain4j-aideepin — versions < 3.5.0

Weakness classification (CWE)

CWE-328 — Use of Weak Hash

References

security-advisories@github.com (x_refsource_CONFIRM)
security-advisories@github.com (x_refsource_MISC)