[MEDIUM] Invalid token creation and validation

PKSA-xt5r-9jkw-6fks CVE-2017-12867 GHSA-597c-mh7m-48v7

Affected package: simplesamlphp/simplesamlphp

Affected version: >=1.14.0,<1.14.15

Reported by:
GitHub, FriendsOfPHP/security-advisories