Handnot2 Samly vulnerabilities

• dropbox samly Missing one-time-use enforcement in Samly allows replay of SAML bearer assertions CVE-2026-53424 9.1 CriticalAugust 20, 2026
• dropbox samly Missing InResponseTo validation in Samly allows acceptance of unsolicited SAML responses CVE-2026-53425 7.6 HighAugust 20, 2026