Logic vulnerability - No password security policy

[NinjaGPT]

Summary

In the latest v6.0.0 version, when users register, there is no password security policy. Passwords can be any combination of any length, even a single digit. Users typically use extremely weak passwords, making it easy for attackers to obtain user account passwords through guessing, brute-force attacks, and other methods.RetryClaude can make mistakes. Please double-check responses.

POC

[atjiu]

thx, fixed!