Possible DOS attack with long user-submitted passwords (correct fix for CVE-2013-5958)

PKSA-92h2-4rjk-8prh CVE-2013-5958

Affected version: >=1.0.0,<1.10.0

Reported by:
FriendsOfPHP/security-advisories