Node-saml Passport-saml vulnerabilities

• node-saml passport-saml Signature bypass via multiple root elements in Passport-SAML CVE-2022-39299 Public exploitFix available 7.4 HighOctober 12, 2022
• node-saml passport-saml Unlimited transforms allowed for signed nodes CVE-2021-39171 Fix available 5.3 MediumAugust 27, 2021