LangChain4j-AIDeepin File Upload Conflict Vulnerability Due to MD5 Hashing

A file upload conflict vulnerability has been identified in LangChain4j-AIDeepin versions prior to 3.5.0. The issue arises because the application uses MD5 to hash files, leading to potential conflicts during file uploads. This vulnerability has been addressed in version 3.5.0.

Impact

Users who upload files may experience conflicts, causing the wrong file to be uploaded or the intended file to be rejected.

Remediation

Users can upgrade to version 3.5.0 to address this vulnerability. If an upgrade is not possible, files can be re-uploaded after making slight adjustments to their content to change the MD5 hash.