simplesamlphp/simplesamlphp-module-casserver vulnerabilities (Packagist)

2 vulnerabilities.

• simplesamlphp/simplesamlphp-module-casserver Packagist SimpleSAMLphp casserver FileSystemTicketStore path traversal allows out-of-ticket-directory read/unserialize and conditional deletion CVE-2026-46491 Fix available 8.6 HighMay 15, 2026
• simplesamlphp/simplesamlphp-module-casserver Packagist SimpleSAMLphp-casserver has an Open Redirect vulnerability via logout CVE-2025-65954 Fix available 4.7 MediumMay 15, 2026