CVE-2026-33643

SQL Injection vulnerability in SchemaHero 0.23.0 via the column parameter to the mysqlColumnAsInsert function in file plugins/mysql/lib/column.go.

Score

CVSS 3.1 7.4 High

Status

Analyzed - cve@mitre.org

Published

2026-03-30

Last modified

2026-03-30

Weaknesses

CWE-89

Affected products

• Schemahero (Schemahero)

References

• https://gist.github.com/b0b0haha/fb59199fb1fdf9414e76442e0599bfed
• https://github.com/b0b0haha/SchemaHero--Sqlinjection/blob/main/README.md