SAMLStorm: Critical Authentication Bypass in XML-crypto and Node.js libraries