Threats affecting pkg:golang/github.com/pilinux/gorest

CVE-2026-48154 is a race condition vulnerability in pilinux gorest versions prior to 1.12.2. It arises from unsynchronized concurrent access to a package-level map used to store 2FA secrets, causing the Go runtime to crash the process. This results in a high availability impact but does not affect confidentiality or integrity. The issue has been fixed in version 1.12.2.