{"data":{"id":"482db9d7-787a-4492-abec-fcf6e00b69c4","title":"CVE-2025-21604: LangChain4j-AIDeepin is a Retrieval enhancement generation (RAG) project. Prior to 3.5.0, LangChain4j-AIDeepin uses MD5…","summary":"CVE-2025-21604 affects LangChain4j-AIDeepin, a retrieval augmented generation (RAG) project, in versions prior to 3.5.0. The project hashes uploaded files with MD5, a weak hash under CWE-328, which may cause file upload conflicts. GitHub, Inc. is the CNA, rating it CVSS 4.0 6.9 MEDIUM.","solution":"Fixed in 3.5.0.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-21604","publishedAt":"2025-01-06T21:15:30.927Z","cveId":"CVE-2025-21604","cweIds":["CWE-328"],"cvssScore":null,"cvssSeverity":null,"severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["LangChain4j-AIDeepin"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"LangChain4j-AIDeepin file upload conflicts from MD5 file hashing","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00269,"epssCheckedAt":"2026-11-04T06:10:14.546Z","kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-10-29T00:11:06.172Z","patchAvailable":null,"disclosureDate":null,"fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-20"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity"],"aiComponentTargeted":"rag","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null,"fixes":[]}}