Vulnerabilities

TI-2026-29597 CVE-2026-40946 · GHSA-fhvp-9hcj-6m33

Oxia: OIDC token audience validation bypass via SkipClientIDCheck

MEDIUM 41

Oxia is a metadata store and coordination system.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00255 Published 2026-04-21 Fixed in 0.16.2 CWE-287

TI-2026-29596 CVE-2026-40945 · GHSA-pm7q-rjjx-979p

LOW 37

Oxia is a metadata store and coordination system.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00308 Published 2026-04-21 Fixed in 0.16.2 CWE-532

TI-2026-29595 CVE-2026-40944 · GHSA-7jrq-q4pq-rhm6

LOW 36

Oxia is a metadata store and coordination system.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.0016 Published 2026-04-21 Fixed in 0.16.2 CWE-295

TI-2026-29594 CVE-2026-40943 · GHSA-5gqc-qhrj-9xw8

LOW 37

Oxia is a metadata store and coordination system.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00202 Published 2026-04-21 Fixed in 0.16.2 CWE-362