---
title: "Notes de publication de Django 2.2.10"
version: 5.1
locale: fr
source: https://docs.djangoproject.com/fr/5.1/releases/2.2.10/
canonical: https://djangodocs.dev/fr/5.1/releases/2.2.10/
---
# Notes de publication de Django 2.2.10

*February 3, 2020*

Django 2.2.10 fixes a security issue in 2.2.9.

## CVE-2020-7471: Potential SQL injection via `StringAgg(delimiter)`

[`StringAgg`](/fr/5.1/ref/contrib/postgres/aggregates/#django.contrib.postgres.aggregates.StringAgg) aggregation function was
subject to SQL injection, using a suitably crafted `delimiter`.