All products

github.com/oxia-db/oxia

Go · Package
4 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Oxia exposes bearer token in debug log messages on authentication failureCVE-2026-40945 · GHSA-PM7Q-RJJX-979PVersion ranges need review. github.com/oxia-db/oxia Go High Fix reported
Oxia has an OIDC token audience validation bypass via SkipClientIDCheckCVE-2026-40946 · GHSA-FHVP-9HCJ-6M33Version ranges need review. github.com/oxia-db/oxia Go Critical Fix reported
Oxia's TLS CA certificate chain validation fails with multi-certificate PEM bundlesCVE-2026-40944 · GHSA-7JRQ-Q4PQ-RHM6Version ranges need review. github.com/oxia-db/oxia Go High Fix reported
Oxia affected by server crash via race condition in session heartbeat handlingCVE-2026-40943 · GHSA-5GQC-QHRJ-9XW8Version ranges need review. github.com/oxia-db/oxia Go High Fix reported