What’s Vulnerable › Products

oxia-db oxia vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your oxia-db oxia version is affected

Latest oxia-db oxia vulnerabilities

• CVE-2026-40946 — Oxia: OIDC token audience validation bypass via SkipClientIDCheck (CVSS 9.2)
• CVE-2026-40945 — Oxia: Bearer token exposed in debug log messages on authentication failure (CVSS 8.7)
• CVE-2026-40944 — Oxia: TLS CA certificate chain validation fails with multi-certificate PEM bundles (CVSS 6.9)
• CVE-2026-40943 — Oxia: Server crash via race condition in session heartbeat handling (CVSS 8.7)