CVE Intelligence

Schemahero vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Schemahero products: 2 record(s), with severity, exploitation and fixes.

Exploited only (KEV) →

CVE-2026-33643 High · 7.4 CWE-89 Mar 30, 2026
SQL Injection in Schemahero
SQL Injection vulnerability in SchemaHero 0.23.0 via the column parameter to the mysqlColumnAsInsert function in file plugins/mysql/lib/column.go.
CVE-2026-29953 High · 7.4 CWE-89 Mar 30, 2026
SQL Injection in Schemahero
SQL Injection vulnerability in SchemaHero 0.23.0 via the column parameter to the columnAsInsert function in file plugins/postgres/lib/column.go.