Threats affecting pkg:github/fastschema/fastschema

A stored cross-site scripting (XSS) vulnerability exists in fastschema through version 0.15.1. This flaw allows a low-privileged authenticated user to upload an SVG file containing malicious JavaScript by bypassing the MIME type allow-list check. The vulnerability can lead to partial compromise of confidentiality and integrity but does not affect availability.

A TOCTOU race condition vulnerability exists in fastschema through version 0.15.1 that allows unauthenticated remote attackers to bypass the OTP attempt limit in the account recovery process. This enables brute-force attacks on 6-digit OTP codes, potentially compromising account security.

A NULL pointer dereference vulnerability exists in fastschema through version 0.15.1. An unauthenticated remote attacker can send a specially crafted HTTP request to the /api/auth/local/recover endpoint, triggering a fatal panic in the sendOTPEmail function. This causes the server process to crash, resulting in a denial of service condition.