CVE-2026-29953: Schemahero

High severity, CVSS 7.4. EPSS: 0.3% chance of exploitation in the next 30 days.

SQL Injection vulnerability in SchemaHero 0.23.0 via the column parameter to the columnAsInsert function in file plugins/postgres/lib/column.go.

Affected products

• Schemahero Schemahero: up to and including 0.23.0

Published 2026-03-30. Last modified 2026-06-17.