VULNERABILITY INTELLIGENCE

CVE-2025-21604

EPSS probability0.27%
CISA KEVNot currently listed
Published2025-01-06
Last modified2026-06-17

Description

LangChain4j-AIDeepin is a Retrieval enhancement generation (RAG) project. Prior to 3.5.0, LangChain4j-AIDeepin uses MD5 to hash files, which may cause file upload conflicts. This issue is fixed in 3.5.0.

Weakness classification

  • security-advisories@github.com: CWE-328

Primary references