Skip to content
Ooxia-db
Products
| Product | CVEs | Exploited | Latest |
|---|
| oxia | 4 | – | Apr 21, 2026 |
Exploited and recent CVEs
-
CVE-2026-40946
Critical 9.2
Oxia: OIDC token audience validation bypass via SkipClientIDCheck
0.3%
-
CVE-2026-40945
High 8.7
Oxia: Bearer token exposed in debug log messages on authentication failure
0.3%
-
CVE-2026-40944
Medium 6.9
Oxia: TLS CA certificate chain validation fails with multi-certificate PEM bundles
0.2%
-
CVE-2026-40943
High 8.7
Oxia: Server crash via race condition in session heartbeat handling
0.2%