GHSA-X8RM-F576-GQ67 graphql-scalars PhoneNumber scalar is vulnerable to regular expression denial of service

Summary The regular expression behind GraphQLPhoneNumber since 1.24.1 backtracks exponentially. A string made of a run of digits followed by one character that makes the match fail for example "1".repeat30 + "x" blocks the JavaScript thread for seconds, and every additional digit doubles the time...