---
title: "Note di rilascio di Django 2.2.10"
version: 5.2
locale: it
source: https://docs.djangoproject.com/it/5.2/releases/2.2.10/
canonical: https://djangodocs.dev/it/5.2/releases/2.2.10/
---
# Note di rilascio di Django 2.2.10

*3 Febbraio 2020*

Django 2.2.10 risolve un problema di sicurezza in 2.2.9.

## CVE-2020-7471: Potential SQL injection via `StringAgg(delimiter)`

[`StringAgg`](/it/5.2/ref/contrib/postgres/aggregates/#django.contrib.postgres.aggregates.StringAgg) aggregation function was
subject to SQL injection, using a suitably crafted `delimiter`.