CVE-2025-27407 Remote code execution when loading a crafted GraphQL schema

[
  {
    "vendor": "rmosolgo",
    "product": "graphql-ruby",
    "versions": [
      {
        "version": ">= 1.11.5, < 1.11.8",
        "status": "affected"
      },
      {
        "version": ">= 1.12.0, < 1.12.25",
        "status": "affected"
      },
      {
        "version": ">= 1.13.0, < 1.13.24",
        "status": "affected"
      },
      {
        "version": ">= 2.0.0, < 2.0.32",
        "status": "affected"
      },
      {
        "version": ">= 2.1.0, < 2.1.14",
        "status": "affected"
      },
      {
        "version": ">= 2.2.0, < 2.2.17",
        "status": "affected"
      },
      {
        "version": ">= 2.3.0, < 2.3.21",
        "status": "affected"
      }
    ]
  }
]