TI-2026-23003 CVE-2026-28809 · GHSA-4g2h-vm7x-747cXXE in esaml SAML library allows local file read and potential SSRFPriority LOW 28XML External Entity (XXE) vulnerability in esaml (and its forks) allows an attacker to cause the system to read local files and incorporate their contents into processed SAML documents, and potentially perform SSRF via c…CVSS 4.0MEDIUM 6.3· Network · No auth · No interaction · EPSS 0.00286 · Published 2026-03-23 · Fixed CWE-611
