LangChain4j-AIDeepin — Vulnerability (CVE-2025-21604)
Date: 2025-01
Attack vector: other
Category: vulnerability-disclosure
Severity: Medium
CVE: CVE-2025-21604
CWE: CWE-328

LangChain4j-AIDeepin is a Retrieval enhancement generation (RAG) project. Prior to 3.5.0, LangChain4j-AIDeepin uses MD5 to hash files, which may cause file upload conflicts. This issue is fixed in 3.5.0.


Mitigations:

Architectural layers (MAESTRO):