CVE-2023-28867: GraphQL Java vulnerable to stack consumption

The vulnerability stems from recursive parsing logic without depth limits. The key evidence comes from:- 1) The fix in PR #3112 explicitly adds depth tracking and limits to the parser- 2) CWE-770 classification indicates unbounded resource allocation (stack space in this case)- 3) Multiple patched versions across different branches all mention 'preventing stack overflow via depth limiting'- 4) The ANTLR recursive descent parser architecture mentioned in the PR discussion is inherently stack-based- While specific function names aren't listed in the advisory, the parser entry point (parseDocument) and grammar rules are the logical location for this vulnerability based on the patch description and stack consumption nature.