Skip to content
OpenAdvisories

Vendor

moyangzhan

3 known vulnerabilities.

Products

langchain4j-aideepin 3
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-125386

    langchain4j-aideepin through 3.32.0 IDOR via /character/message reference endpoints

    langchain4j-aideepin through 3.32.0 contains an insecure direct object reference vulnerability in CharacterMessageController that allows authenticated users to access other users' message references due to missing owner checks. Attackers can supply another us…

    moyangzhan langchain4j-aideepin
  • Medium 5.3
    CVE-2026-121938

    langchain4j-aideepin before 3.31.0 IDOR via GET /character/{uuid}

    langchain4j-aideepin before 3.31.0 contains an insecure direct object reference vulnerability that allows authenticated users to read other users' character-chat conversations by supplying their character uuid. Attackers can request GET /character/{uuid}, whi…

    moyangzhan langchain4j-aideepin
  • Medium 6.9
    CVE-2025-21604

    LangChain4j-AIDeepin Using MD5 to Hash files may cause file upload conflicts

    LangChain4j-AIDeepin is a Retrieval enhancement generation (RAG) project. Prior to 3.5.0, LangChain4j-AIDeepin uses MD5 to hash files, which may cause file upload conflicts. This issue is fixed in 3.5.0.

    moyangzhan langchain4j-aideepin