CVE-2026-29953

SQL Injection vulnerability in SchemaHero 0.23.0 via the column parameter to the columnAsInsert function in file plugins/postgres/lib/column.go...

EUVD-2026-17131

SQL Injection vulnerability in SchemaHero 0.23.0 via the column parameter to the columnAsInsert function in file plugins/postgres/lib/column.go...

CVE-2026-29953

SQL Injection vulnerability in SchemaHero 0.23.0 via the column parameter to the columnAsInsert function in file plugins/postgres/lib/column.go...

CVE-2026-29953

SchemaHero version 0.23.0 is susceptible to an SQL Injection vulnerability. The root cause is the improper handling of the column parameter within the columnAsInsert function, located in the file plugins/postgres/lib/column.go. This flaw could allow an attacker to execute unauthorized SQL command...