Skip to content
OpenAdvisories

Package · Go

github.com/oxia-db/oxia

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.2
    CVE-2026-40946

    Oxia: OIDC token audience validation bypass via SkipClientIDCheck

    Oxia is a metadata store and coordination system. Prior to 0.16.2, the OIDC authentication provider unconditionally sets SkipClientIDCheck: true in the go-oidc verifier configuration, disabling the standard audience (aud) claim validation at the library level…

    oxia-db oxia github.com/oxia-db/oxia Go