github.com/oxia-db/oxia vulnerabilities (Go)

4 vulnerabilities.

• github.com/oxia-db/oxia Go Oxia: TLS CA certificate chain validation fails with multi-certificate PEM bundles CVE-2026-40944 Fix available 6.9 MediumApril 14, 2026
• github.com/oxia-db/oxia Go Oxia: Server crash via race condition in session heartbeat handling CVE-2026-40943 Fix available 8.7 HighApril 14, 2026
• github.com/oxia-db/oxia Go Oxia: OIDC token audience validation bypass via SkipClientIDCheck CVE-2026-40946 Fix available 9.2 CriticalApril 14, 2026
• github.com/oxia-db/oxia Go Oxia: Bearer token exposed in debug log messages on authentication failure CVE-2026-40945 Fix available 8.7 HighApril 14, 2026