A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.6 and iPadOS 13.6, Safari 13.1.2. A malicious attacker may cause Safari to suggest a password for the wrong domain.
Published October 16, 2020.
Apple Ipad OS
Apple Safari
Apple iPhone OS