---
title: "Nótaí scaoilte Django 4.0.6"
version: 6.1
locale: ga
source: https://docs.djangoproject.com/ga/6.1/releases/4.0.6/
canonical: https://djangodocs.dev/ga/6.1/releases/4.0.6/
---
# Nótaí scaoilte Django 4.0.6

*4 Iúil, 2022*

Socraíonn Django 4.0.6 saincheist slándála le déine “ard” i 4.0.5.

## CVE-2022-34265: Instealladh SQL féideartha trí argóintí ```Trunc (cineál) ``agus ``Sliocht (lookupname)```

[`Trunc()`](/ga/6.1/ref/models/database-functions/#django.db.models.functions.Trunc) and
[`Extract()`](/ga/6.1/ref/models/database-functions/#django.db.models.functions.Extract) database functions were
subject to SQL injection if untrusted data was used as a
`kind`/`lookup_name` value.

Ní chuirtear isteach ar iarratais a chuireann srian ar an ainm cuardaigh agus an rogha cineálta ar liosta sábháilte ar eolas.