A denial of service vulnerability exists in the GraphQL-core library used by Moto due to a memory leak triggered by aborted validations when the number of validation errors exceeds the max_errors limit (default 100). This causes a shared exception instance to accumulate traceback frames, retaining memory indefinitely and leading to memory exhaustion. The issue affects Moto versions >=5.2.3_1 and <5.2.5 and is fixed in version 5.2.5.