The SAML module uses SimpleSAML. Our developers talked with the SimpleSAML devs and confirmed that it is not vulnerable to recently found issues.
x