Acquia recommends all applications using SimpleSAMLphp upgrade to version 1.17.7 to fix a critical security vulnerability.