CVE-2025-6211: Document Chunk Id Hash Collision
A document chunk ID is generated by hashing only its text content (`$OBJ.text`), while structural metadata (`$OBJ.$PROP`) is available and included in the output. This can lead to hash collisions and data overwrites if different structural elements contain identical text. Include structural properties in the hash input to ensure uniqueness.
Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0
Python
Pythongreprules fetch cve-2025-6211-document-chunk-id-hash-collision --engine opengrepDescription
A document chunk ID is generated by hashing only its text content (`$OBJ.text`), while structural metadata (`$OBJ.$PROP`) is available and included in the output. This can lead to hash collisions and data overwrites if different structural elements contain identical text. Include structural properties in the hash input to ensure uniqueness.
Community feedback
0 signals from signed-in users.
- Useful
- 0
- False positive
- 0
- Metadata
- 0