CVE WATCH / VULNERABILITY DETAIL
CVE-2026-55239
HIGHCVSS 8.8NVD feed
Published 15 October 2026 · tracked since 16 October 2026
Description
Tianji is an open source analytics, uptime monitoring, and server status platform. Prior to 1.31.29, the getDateQuery() function in src/server/utils/prisma.ts constructs raw SQL through Prisma.sql() by interpolating the timezone request value without parameter binding. The timezone value can reach a
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2025-61624
- CVE-2026-111284 MEDIUM 5.4
- CVE-2026-110917 MEDIUM 4.3
- CVE-2026-110919 HIGH 8.8
- CVE-2026-110920 HIGH 8.8
- CVE-2026-110921 HIGH 8.8
- CVE-2026-110922 HIGH 8.8
- CVE-2026-110913 HIGH 8.8
- CVE-2026-110914 HIGH 8.8
- CVE-2026-110915 HIGH 8.8