Advisories for Gem/Autolab package

For email-based accounts, users with insufficient privileges could reset and theoretically access privileged users' accounts by resetting their passwords.