[CRITICAL] GraphQL queries can expose password hashes

PKSA-18gg-2y4h-z7rs GHSA-3p7g-wrgg-wq45

Affected version: >=3.3.0,<3.3.28|>=4.2.0,<4.2.3|>=2.5.0,<2.5.31

Reported by:
GitHub