default password validation has no max length - is this a security issue?

[msporleder]

looking at https://github.com/laravel/framework/blob/9.x/src/Illuminate/Validation/Rules/Password.php there doesn't seem to be a max length for password validation by default, meaning you could send a very large string to the hash function and the couple of regex in the default rules (mixed case, etc). I believe rails uses a default max of 72 chars.

If nothing else should this be a doc enhancement in the Hash::make or validation docs?