The version of kotlin used (1.4.10 in neo4j-graphql-java 1.2.0) is affected by [CVE-2020-29582](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-29582). This needs to be updated to 1.4.21 (or later).