webonyx graphql-php

• CVE-2026-107376 High 8.2 webonyx graphql-php: Unbounded recursion in parser causes stack overflow on crafted nested input 0.4%
• CVE-2026-40476 Medium 6.9 graphql-php: Denial of Service via quadratic complexity in OverlappingFieldsCanBeMerged validation 0.6%