A CVSS 10.0 Bug and the Problem of Conflicting Advisories (node-saml)