Password history is not being respected in password reset

We require that a user cannot use on of their previous 4 password when reset a password. But we are seeing in the password reset flow that this is not being respected. I can reset using my last password.

Hi @MikeP,

Welcome back!

Would you please DM me the name of the affected tenant so I can take a look?