CVE-2026-33643

SchemaHero version 0.23.0 is vulnerable to SQL Injection due to improper handling of the column parameter within the mysqlColumnAsInsert function in plugins/mysql/lib/column.go. This flaw also exists in the PostgreSQL table schema components. An attacker can tamper with database table structures ...

CVE-2026-29953

SchemaHero version 0.23.0 is susceptible to an SQL Injection vulnerability. The root cause is the improper handling of the column parameter within the columnAsInsert function, located in the file plugins/postgres/lib/column.go. This flaw could allow an attacker to execute unauthorized SQL command...