[HIGH] SimpleSAMLphp has Possible DoS via XPath Transform

PKSA-11bv-m3wk-h9sn CVE-2026-49289 GHSA-5cjr-mxj5-wmrx

Affected package: simplesamlphp/saml2-legacy

Affected version: <=4.20.2

Reported by:
GitHub