graphql-go (aka GraphQL for Go) through 0.8.0 has infinite recursion in the type definition parser. References https://nvd.nist.gov/vuln/detail/CVE-2022-37315 https://github.com/graphql-go/graphql/issues/637 https://github.com/advisories/GHSA-h3qm-jrrf-cgj3