It's so bad

Here is a major vulnerability we disclosed earlier this year:

https://workos.com/blog/samlstorm