[MEDIUM] CVE-2021-28661 Default GraphQL permission checker not inherited by query subclass

PKSA-xsgp-6qh9-44d8 CVE-2021-28661 GHSA-r7rh-g777-g5gx

Affected package: silverstripe/graphql

Affected version: >=3.0.0,<3.5.2

Reported by:
GitHub, FriendsOfPHP/security-advisories