---
title: "Nótaí scaoilte Django 1.11.28"
version: 6.0
locale: ga
source: https://docs.djangoproject.com/ga/6.0/releases/1.11.28/
canonical: https://djangodocs.dev/ga/6.0/releases/1.11.28/
---
# Nótaí scaoilte Django 1.11.28

*3 Feabhra, 2020*

Socraíonn Django 1.11.28 saincheist slándála i 1.11.27.

## CVE-2020-7471: Instealladh SQL féideartha trí StringaGg (teorannaitheoir) \`\`

[`StringAgg`](/ga/6.0/ref/contrib/postgres/aggregates/#django.contrib.postgres.aggregates.StringAgg) aggregation function was
subject to SQL injection, using a suitably crafted `delimiter`.