Django 1.11.29 リリースノート¶ March 4, 2020 Django 1.11.29 fixes a security issue in 1.11.28. CVE-2020-9402: Potential SQL injection via tolerance parameter in GIS functions and aggregates on Oracle¶ GIS functions and aggregates on Oracle were subject to SQL injection, using a suitably crafted tolerance.