Advisories for Npm/Flintcms package

A privilege escalation detected in flintcms allows account takeover due to blind MongoDB injection in password reset.