Schemahero

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Schemahero records in CISA KEV

No Schemahero vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records

TI-2026-26024 CVE-2026-33643 · GHSA-m5m9-33h7-wcc7

HIGH 66

SQL Injection vulnerability in SchemaHero 0.23.0 via the column parameter to the mysqlColumnAsInsert function in file plugins/mysql/lib/column.go.

CVSS 3.1HIGH 7.4 Network Low privileges No interaction EPSS 0.00199 Published 2026-03-30 No fix listed CWE-89

TI-2026-23403 CVE-2026-29953 · GHSA-wfp6-2cvw-9pcm

HIGH 66

SQL Injection vulnerability in SchemaHero 0.23.0 via the column parameter to the columnAsInsert function in file plugins/postgres/lib/column.go.

CVSS 3.1HIGH 7.4 Network Low privileges No interaction EPSS 0.00199 Published 2026-03-30 No fix listed CWE-89