Skip to content
OpenAdvisories

Vendor

oxia-db

4 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Medium 6.9

    Oxia: TLS CA certificate chain validation fails with multi-certificate PEM bundles

    Oxia is a metadata store and coordination system. Prior to 0.16.2, the trustedCertPool() function in the TLS configuration only parses the first PEM block from CA certificate files. When a CA bundle contains multiple certificates (e.g., intermediate + root CA…