[HIGH] GraphQL query operations security can be bypassed

PKSA-rfnk-z282-zpmp CVE-2025-31481 GHSA-cg3c-245w-728m

Affected package: api-platform/graphql

Affected version: <3.4.17|>=4.0.0,<4.0.22|>=4.1.0,<4.1.5

Reported by:
FriendsOfPHP/security-advisories, GitHub