Vulnerabilities in apollo-server-core 2.5.0