CVE-2025-27773: Saml Improper Reencoding Signature Bypasscve-2025-27773-saml-improper-reencoding-signature-bypass
Re-encoding parsed query parameters (like SAMLRequest or SAMLResponse) using urlencode() to reconstruct a query string for signature validation is unsafe. Framework query parsing (e.g., `getQueryParams()`) may drop duplicate parameters or decode values differently than they appear in the raw request. This can allow an attacker to bypass SAML signature valida
