CVE-2020-26136 GraphQL doesn't honour MFA when using basic auth

CVE-2020-26136

Affected version: >=3.0.0,<3.5.0|>=4.0.0-alpha1,<4.0.0-alpha2

Reported by:
GitHub, FriendsOfPHP/security-advisories