Product
SuperTokens Core fails to properly validate SAML assertions, allowing for replay attacks and identity spoofing in specific configurations.