Note di rilascio di Django 2.2.10
3 Febbraio 2020
Django 2.2.10 risolve un problema di sicurezza in 2.2.9.
CVE-2020-7471: Potential SQL injection via StringAgg(delimiter)
StringAgg
aggregation function was
subject to SQL injection, using a suitably crafted delimiter
.