---
title: "Note di rilascio di Django 1.11.28"
version: 4.1
locale: it
source: https://docs.djangoproject.com/it/4.1/releases/1.11.28/
canonical: https://djangodocs.dev/it/4.1/releases/1.11.28/
---
# Note di rilascio di Django 1.11.28

*3 Febbraio 2020*

Django 1.11.28 risolve un problema di sicurezza in 1.11.27.

## CVE-2020-7471: Potential SQL injection via `StringAgg(delimiter)`

[`StringAgg`](/it/4.1/ref/contrib/postgres/aggregates/#django.contrib.postgres.aggregates.StringAgg) aggregation function was
subject to SQL injection, using a suitably crafted `delimiter`.