simplesamlphp simplesamlphp-module-casserver

• CVE-2026-46491 High 8.6 SimpleSAMLphp casserver FileSystemTicketStore path traversal allows out-of-ticket-directory read/unserialize and conditional deletion 0.4%
• CVE-2025-65954 Medium 4.7 SimpleSAMLphp-casserver has an Open Redirect vulnerability via logout 0.3%