Skip to content
OpenAdvisories

Package · Go

github.com/oxia-db/oxia

4 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.9

    Oxia: TLS CA certificate chain validation fails with multi-certificate PEM bundles

    Oxia is a metadata store and coordination system. Prior to 0.16.2, the trustedCertPool() function in the TLS configuration only parses the first PEM block from CA certificate files. When a CA bundle contains multiple certificates (e.g., intermediate + root CA…