001b0634cd309e372edb6d7d95d083d02b8e37bd | Vulnerability History Project

The Vulnerability History Project

[1.11.x] Fixed CVE-2020-7471 -- Properly escaped StringAgg(delimiter) parameter.

by Stephanie the Jack Russel 2020-01-22 08:03:27 UTC

commit 001b0634cd309e372edb6d7d95d083d02b8e37bd

Django Fix DeLimiting My Access CVE-2020-7471

django/contrib/postgres/aggregates/general.py

+2 -4

docs/releases/1.11.28.txt

-13

docs/releases/index.txt

-1

tests/postgres_tests/test_aggregates.py

-4

expand_less