---
title: "Django 1.11.29 release notes"
version: 2.2
locale: en
source: https://docs.djangoproject.com/en/2.2/releases/1.11.29/
canonical: https://djangodocs.dev/en/2.2/releases/1.11.29/
---
# Django 1.11.29 release notes

*March 4, 2020*

Django 1.11.29 fixes a security issue in 1.11.28.

## CVE-2020-9402: Potential SQL injection via `tolerance` parameter in GIS functions and aggregates on Oracle

GIS functions and aggregates on Oracle were subject to SQL injection,
using a suitably crafted `tolerance`.