CVE-2026-55239 - Tianji: SQL Injection via unsanitized timezone parameter in analytics queries
CVE ID :CVE-2026-55239 Published : Oct. 15, 2026, 7:17 p.m. | 16 minutes ago Description :Tianji is an open source analytics, uptime monitoring, and server status platform. Prior to 1.31.29, the getDateQuery() function in src/server/utils/prisma.ts constructs raw SQL through Prisma.sql() by...