agentprime: timlegge-net-saml2Every new CVE for timlegge-net-saml2.https://agentprime.io/CVE-2026-18092: Net::SAML2 versions before 0.86 for Perl allow SAML authentication bypass via XML signature wrapping because new_from_xml reads assertion identity with document-wide XPath instead of the signed subtr…https://agentprime.io/advisories/CVE-2026-18092/https://agentprime.io/advisories/CVE-2026-18092/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Aug 2026 13:24:52 GMTCVECVE-2026-18108: Net::SAML2 versions before 0.86 for Perl allow authentication bypass because _verify_encrypted_assertion accepts an EncryptedAssertion whose decrypted content carries no signaturehttps://agentprime.io/advisories/CVE-2026-18108/https://agentprime.io/advisories/CVE-2026-18108/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Aug 2026 13:00:23 GMTCVEcriticalCVE-2026-18089: Net::SAML2 versions before 0.86 for Perl allow SAML authentication bypass by verifying responses against the response-embedded certificate in verify_xml when no trust anchor is configuredhttps://agentprime.io/advisories/CVE-2026-18089/https://agentprime.io/advisories/CVE-2026-18089/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Aug 2026 12:42:08 GMTCVE