This issue is fired whenever your app does not have a minimum password policy for your user accounts.

Minimum password requirements help to protect web applications by ensuring that users create strong and unique passwords that are resistant to brute-force attacks and guessing. This can help to prevent user accounts from being compromised and protect sensitive data.

You can easily set minimum password requirements by going to “Settings > General”.
We recommend putting at least 8 characters and requiring at least a number, a capital letter, and a non-alphanumeric character.