Skip to content
OpenAdvisories

Vendor

msgbyte

2 known vulnerabilities.

Products

tianji 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-55239

    Tianji: SQL Injection via unsanitized timezone parameter in analytics queries

    Tianji is an open source analytics, uptime monitoring, and server status platform. Prior to 1.31.29, the getDateQuery() function in src/server/utils/prisma.ts constructs raw SQL through Prisma.sql() by interpolating the timezone request value without paramete…

    msgbyte tianji