CVE-2026-72582 | fastschema up to 0.15.1 pkg/auth/local.go sendOTPEmail null pointer dereference

A vulnerability marked as problematic has been reported in fastschema up to 0.15.1. Affected is the function sendOTPEmail of the file pkg/auth/local.go. The manipulation leads to null pointer dereference. This vulnerability is traded as CVE-2026-72582. It is possible to initiate the attack remotely. There is no exploit available.