Critical GraphQL-Ruby Flaw Exposes Millions to RCE

The vulnerability, having a critical CVSS score of 9.1, stems from the way the graphql-ruby gem handles schema loading via GraphQL::Schema.from_introspection and GraphQL::Schema::Loader.load.