simplesamlphp versions prior to 1.14.4 suffers from a link injection / open redirection vulnerability. Continue reading...