[HIGH] SimpleSAMLphp has Possible DoS via XPath Transform

PKSA-1fc7-xrz7-vw78 CVE-2026-49289 GHSA-5cjr-mxj5-wmrx

Affected package: simplesamlphp/saml2

Affected version: <=4.20.2

Reported by:
GitHub