---
title: "Note di rilascio di Django 2.2.10"
version: 6.1
locale: it
source: https://docs.djangoproject.com/it/6.1/releases/2.2.10/
canonical: https://djangodocs.dev/it/6.1/releases/2.2.10/
---
# Note di rilascio di Django 2.2.10

*3 Febbraio 2020*

Django 2.2.10 risolve un problema di sicurezza in 2.2.9.

## CVE-2020-7471: Potential SQL injection via `StringAgg(delimiter)`

[`StringAgg`](/it/6.1/ref/contrib/postgres/aggregates/#django.contrib.postgres.aggregates.StringAgg) aggregation function was
subject to SQL injection, using a suitably crafted `delimiter`.