GHSA-5CJR-MXJ5-WMRX SimpleSAMLphp has Possible DoS via XPath Transform

Summary This library turned out to be vulnerable to Denial-of-Service attacks using XPath transforms. A mitigation has been put in place to restrict the number of transforms and to restrict transforms to only the transform-algorithms mentioned in the SAML 2.0 Core Specifications and specifically...

PT-2026-55454

Name of the Vulnerable Software and Affected Versions SimpleSAMLphp versions 4.19.2 through 4.19.2 SimpleSAMLphp versions 4.20.2 through 4.20.2 Description The SAML2 library permits attacker-controlled XPath transforms during the processing of XML signatures in specially crafted SAML messages...