[HIGH] webonyx/graphql-php has quadratic validation cost in OverlappingFieldsCanBeMerged via inline fragments

PKSA-sf9j-1gs7-xzvx GHSA-fc86-6rv6-2jpm

Affected package: webonyx/graphql-php

Affected version: <15.32.2

Reported by:
GitHub