[MEDIUM] CVE-2019-1000011: Access control bypass in GraphQL mutations

PKSA-2j74-htpf-prz8 CVE-2019-1000011 GHSA-974j-wjxx-wggj

Affected version: >=2.2.0,<2.2.10|>=2.3.0,<2.3.6

Reported by:
FriendsOfPHP/security-advisories, GitHub