Fastschema vulnerabilities
We track 2 vulnerabilities in Fastschema products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 10, 2026.
2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score
Latest Fastschema vulnerabilities
- 7.4 High severity
fastschema: Time-of-check Time-of-use (TOCTOU) Race Condition
A time-of-check/time-of-use (TOCTOU) race condition in fastschema through v0.15.1 allows an unauthenticated remote attacker to bypass the OTP attempt limit on the account recovery flow, enabling brute-force attacks on 6-digit OTP codes.
- 7.5 High severity
fastschema: NULL Pointer Dereference
A NULL pointer dereference vulnerability in fastschema through v0.15.1 allows an unauthenticated remote attacker to crash the server process with a single HTTP request. The sendOTPEmail function in pkg/auth/local.go dereferences a pointer obtained from an unch