[HIGH] Incorrect cache context on password reset page

PKSA-vmgf-49qv-szpf CVE-2016-9450 GHSA-98w5-wqp9-w466

Affected package: drupal/drupal

Affected version: >=8.0,<8.1.0|>=8.1.0,<8.2.0|>=8.2.0,<8.2.3

Reported by:
FriendsOfPHP/security-advisories, GitHub