After locking the screen, it is possible to use the Shift-Insert keyboard combination to paste the current clipboard content into (at least) the password input field, which get shown as asterisks, hence revealing the exact length of the current clipboard contents string at least, eventually worse.
This is most likely already fixed in newer releases.
Fixed in newer release.
*** This bug has been marked as a duplicate of bug 376526 ***