graphql-go/graphql <= 0.8.1: quadratic CPU-exhaustion DoS via per-error full-document rescan (GetLocation)

<p>Posted by First name Last name on Aug 26</p>Hello,<br /> <br /> This reports an algorithmic-complexity denial-of-service defect in<br /> github.com/graphql-go/graphql, affecting all released versions up to and<br /> including the latest, v0.8.1. No fixed version exists. It is<br /> unauthenticated, network-reachable, triggered purely by attacker-controlled<br /> query text, and requires no spec