CVE-2025-21604

LangChain4j-AIDeepin is a Retrieval enhancement generation (RAG) project. Prior to 3.5.0, LangChain4j-AIDeepin uses MD5 to hash files, which may cause file upload conflicts. This issue is fixed in 3.5.0.

Scoring

Severity

MEDIUM

CVSS base score

6.9

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N

EPSS probability

0.26%

CWE

CWE-328

Published

2025-01-06

Last modified

2026-03-12

Affected products

• moyangzhan langchain4j-aideepin

Weakness type

• CWE-328

Related vulnerabilities

• CVE-2026-15605 — wandb Artifact Integrity Validation hashutil.py ArtifactManifestEntry.download weak hash
• CVE-2026-41879 — Weak password hashing in R-SOFT DMS
• CVE-2026-14742 — langchain-ai langgraph Task Result Cache _cache.py _freeze weak hash
• CVE-2026-14738 — exo-explore exo Vision Feature Cache vision.py _image_cache_key weak hash
• CVE-2026-14630 — ForceInjection AI-fundermentals Memory Recall smart_customer_service.py get_conversation_history weak hash
• CVE-2026-10540 — Weak password hash protection in Control-M/Entreprise Manager
• CVE-2026-13455 — PostgreSQL Anonymizer: Unrestricted function can leak the secret salt
• CVE-2026-53692 — Weak hashing algorithm in Redeight CMS

Markdown version · Browse all CVEs