An error during signature verification can be treated as a successful verification.

PKSA-nh5k-9wsp-k4zd

Affected package: onelogin/php-saml

Affected version: <2.10.4

Reported by:
FriendsOfPHP/security-advisories