Vulnerability in Oxia-db Oxia

CVE-2026-40944

Oxia is a metadata store and coordination system. Prior to 0.16.2, the trustedCertPool() function in the TLS configuration only parses the first PEM block from CA certificate files. When a CA bundle contains multiple certificates (e.g., in…

Vulnerability class: Improper Certificate Validation

EPSS: 0.002 (5.6th percentile) — read the EPSS interpretation.