oxia-db — Vulnerabilities & Security Advisories 4

Oxia-db serves as a distributed database management system designed for handling time-series data in industrial IoT environments. Historically, it has been susceptible to multiple remote code execution vulnerabilities due to insufficient input validation in API endpoints, as well as cross-site scripting flaws through improper sanitization of user-supplied data. Privilege escalation issues have also been documented, stemming from weak access control mechanisms. The four publicly disclosed CVEs highlight consistent patterns of insecure deserialization and inadequate authentication controls. While no major security incidents have been widely reported, the accumulation of multiple RCE and XSS vulnerabilities suggests ongoing challenges in secure coding practices and input handling within the platform's architecture.