Threats tagged 'ghsa-58f4-85vm-hv79'

langchain4j-aideepin versions through 3.32.0 have an insecure direct object reference (IDOR) vulnerability in the CharacterMessageController. Authenticated users can exploit this flaw by supplying another user's message UUID to specific endpoints, allowing unauthorized access to message references including knowledge-base chunks, long-term memory text, and knowledge-graph data.