A vulnerability, which was classified as problematic, was found in dropbox/arekinath/handnot2 esaml. This affects an unknown part of the component SAML Handler. Such manipulation leads to xml external entity reference.

This vulnerability is listed as CVE-2026-28809. The attack may be performed from remote. There is no available exploit.

You should upgrade the affected component.