node-saml passport-saml

• CVE-2022-39299 High 7.4 Signature bypass via multiple root elements in Passport-SAML 4.5%
• CVE-2021-39171 Medium 5.3 Unlimited transforms allowed for signed nodes 1.3%