Add JSON vulnerability examples to Flask

[execveat]

Not sure where to place those, perhaps in type confusion or as a separate category?

• indirect access, passing to another function as json, etc
• upsert some unexpected data due to partial validation (e.g. only check certain field, but pass the whole object)
• get a list or dict where a single value was expected