HIGHGo
GHSA-5gqc-qhrj-9xw8· CVE-2026-40943, GO-2026-5145Oxia affected by server crash via race condition in session heartbeat handling
Modified: 6/25/2026
package
Go/github.com/oxia-db/oxia
pkg:go/github.com/oxia-db/oxia
HIGHGo
GHSA-7jrq-q4pq-rhm6· CVE-2026-40944, GO-2026-5226Oxia's TLS CA certificate chain validation fails with multi-certificate PEM bundles
Modified: 6/25/2026
CRITICALGo
GHSA-fhvp-9hcj-6m33· CVE-2026-40946, GO-2026-5364Oxia has an OIDC token audience validation bypass via SkipClientIDCheck
Modified: 6/25/2026
HIGHGo
GHSA-pm7q-rjjx-979p· CVE-2026-40945, GO-2026-5546Oxia exposes bearer token in debug log messages on authentication failure
Modified: 6/25/2026
—Go
GO-2026-5145· CVE-2026-40943, GHSA-5gqc-qhrj-9xw8Oxia affected by server crash via race condition in session heartbeat handling in github.com/oxia-db/oxia
Modified: 6/25/2026
—Go
GO-2026-5226· CVE-2026-40944, GHSA-7jrq-q4pq-rhm6Oxia's TLS CA certificate chain validation fails with multi-certificate PEM bundles in github.com/oxia-db/oxia
Modified: 6/25/2026
—Go
GO-2026-5364· CVE-2026-40946, GHSA-fhvp-9hcj-6m33Oxia has an OIDC token audience validation bypass via SkipClientIDCheck in github.com/oxia-db/oxia
Modified: 6/25/2026
—Go
GO-2026-5546· CVE-2026-40945, GHSA-pm7q-rjjx-979pOxia exposes bearer token in debug log messages on authentication failure in github.com/oxia-db/oxia
Modified: 6/25/2026