pilinux CVE debriefs

CVE-2026-48154

The GoRest library, a Golang starter kit for building RESTful APIs with the Gin framework, contains a race condition vulnerability in its nMemorySecret2FA implementation prior to version 1.12.2. This vulnerability arises from the use of an unsynchronized package-level map to store 2FA secrets, which can be concurrently read from and written to by multiple HTTP handlers in handler/login.go and handler/twoF [truncated]