oxia-db oxia

• CVE-2026-40946 Critical 9.2 Oxia: OIDC token audience validation bypass via SkipClientIDCheck 0.3%
• CVE-2026-40945 High 8.7 Oxia: Bearer token exposed in debug log messages on authentication failure 0.3%
• CVE-2026-40944 Medium 6.9 Oxia: TLS CA certificate chain validation fails with multi-certificate PEM bundles 0.2%
• CVE-2026-40943 High 8.7 Oxia: Server crash via race condition in session heartbeat handling 0.2%