simplesamlphp xml-security

• CVE-2026-32600 High 8.2 xml-security is Missing AES-GCM Authentication Tag Validation on Encrypted Nodes Allows for Unauthorized Decryption 0.2%
• CVE-2023-49087 Medium 6.8 Validation of SignedInfo 0.2%