simplesamlphp saml2

• CVE-2026-49289 High 7.5 SimpleSAMLphp SAML2: Possible DoS via XPath Transform 0.8%
• CVE-2026-49283 High 8.7 SimpleSAMLphp HTTP-Artifact TLS validator confusion allows cross-IdP authentication bypass 0.5%
• CVE-2025-27773 High 8.6 SimpleSAMLphp SAML2 library has incorrect signature verification for HTTP-Redirect binding 0.4%
• CVE-2024-52806 High 8.3 SimpleSAMLphp SAML2 has an XXE in parsing SAML messages 0.4%