Advisories for Maven/Org.springframework.security/Spring-Security-Saml2-Service-Provider package

When using the spring-security-saml2-service-provider component, a malicious user can carefully modify an otherwise valid SAML response and append an arbitrary assertion that Spring Security will accept as valid.