---
title: "Django 2.2.10 release notes"
version: 6.1
locale: ko
source: https://docs.djangoproject.com/ko/6.1/releases/2.2.10/
canonical: https://djangodocs.dev/ko/6.1/releases/2.2.10/
---
# Django 2.2.10 release notes

*February 3, 2020*

Django 2.2.10 fixes a security issue in 2.2.9.

## CVE-2020-7471: Potential SQL injection via `StringAgg(delimiter)`

[`StringAgg`](/ko/6.1/ref/contrib/postgres/aggregates/#django.contrib.postgres.aggregates.StringAgg) aggregation function was
subject to SQL injection, using a suitably crafted `delimiter`.