[HIGH] The SimpleSAMLphp SAML2 library incorrectly verifies signatures for HTTP-Redirect binding

PKSA-rxdv-j1j4-96fj CVE-2025-27773 GHSA-46r4-f8gj-xg56

Affected package: simplesamlphp/saml2

Affected version: <=4.16.15|>=5.0.0-alpha.1,<=5.0.0-alpha.19

Reported by:
GitHub