CVE-2026-55239 is a high-severity vulnerability in the Tianji open-source analytics, uptime monitoring, and server status platform. An attacker can execute arbitrary SQL against the shared PostgreSQL database, potentially disclosing or modifying sensitive data, or making the service unavailable. This issue is fixed in version 1.31.29. The vulnerability allows attackers to execute arbitrary SQL, which can [truncated]
CVE-2026-55240 Tianji Remote Code Execution via lodash template evaluate pattern in survey feed templates. This critical vulnerability allows an unauthenticated user to execute server-side JavaScript, potentially leading to command execution, secret disclosure, data modification, or service disruption. Affected versions should be upgraded to version 1.31.29 or later to mitigate the vulnerability. The vuln [truncated]
