[HIGH] Null reset codes were allowed

PKSA-p714-559s-qh89 GHSA-2m5g-8xpw-42vp

Affected version: <2.1.7

Reported by:
FriendsOfPHP/security-advisories, GitHub