find elements values are flows through the code without properly sanitized or validated. This may enable an second order SQL injection attack

Question

tags = mycoll.find({"category": "movie"}).distinct("tags")

I have used above code in django and feel it\'s there is no iss