---
title: "Note di rilascio di Django 1.11.29"
version: 4.1
locale: it
source: https://docs.djangoproject.com/it/4.1/releases/1.11.29/
canonical: https://djangodocs.dev/it/4.1/releases/1.11.29/
---
# Note di rilascio di Django 1.11.29

*4 Marzo 2020*

Django 1.11.29 risolve un problema di sicurezza in 1.11.28.

## CVE-2020-9402: Potential SQL injection via `tolerance` parameter in GIS functions and aggregates on Oracle

GIS functions and aggregates on Oracle were subject to SQL injection,
using a suitably crafted `tolerance`.
