Sql injection in forgotpass fixed

you should update asap

https://git.tt-rss.org/git/tt-rss/commit/2352c320c2ed34ec7df1ad22f0c55a1b26489815

thanks to Julien Palard for findind this