Django 1.11.29 release notesLink to this heading

March 4, 2020

Django 1.11.29 fixes a security issue in 1.11.28.

CVE-2020-9402: Potential SQL injection via `tolerance` parameter in GIS functions and aggregates on OracleLink to this heading

GIS functions and aggregates on Oracle were subject to SQL injection, using a suitably crafted tolerance.

View as Markdown Edit this page on GitHub Official version