oss-security·12d agographql-go/graphql <= 0.8.1: quadratic CPU-exhaustion DoS via OverlappingFieldsCanBeMergedRule#algorithmic-complexity#coordinated-disclosure#dosVulnerability