DOCS-37: Add fix description for SAML replay vuln

[jeff-matthews]

Summary

This pull request (PR) adds a fix description for a CVE fix being released in v9.7.0.

Summary by CodeRabbit

• Bug Fixes

  • Improved SAML authentication security by detecting reused response and assertion identifiers.
  • Rejected authentication callbacks associated with previously processed SAML responses, helping prevent replay attacks.

• Documentation

  • Corrected the fixed-issues link for the September 8, 2026 release notes.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Essentials

Run ID: e0275a45-944a-4581-84a0-cdbd8ef98639

📥 Commits

Reviewing files that changed from the base of the PR and between 7bca3fa and 79a32f6.

📒 Files selected for processing (2)

• docs/resources/release-notes/2026-09-08.mdx
• docs/resources/release-notes/summary.mdx

Included review availability: 4 reviews are currently available. Your included PR review attempts over the past 7 days set your current allowance at 5 reviews per hour.

---

Walkthrough

The release notes document SAML replay protection and update the 2026-09-08 fixed-issues link to the bloodhound-10 section.

Changes

Release notes

Layer / File(s)	Summary
Document authentication fix and navigation docs/resources/release-notes/2026-09-08.mdx, docs/resources/release-notes/summary.mdx	The release notes document SAML response and assertion ID replay protection. The summary links to the bloodhound-10 section.

Estimated code review effort: 1 (Trivial) | ~3 minutes

Merge Risk: ⚪ Minimal · up to 79a32

This updates release notes for SAML replay protection and corrects the fixed-issues link. The documentation changes are ready to merge.

Poem

A rabbit reads the release note bright
SAML IDs guard the session right
Replay paths now close their gate
The link hops to the proper slate
Fresh notes settle, neat and clear
Carrots celebrate the fix this year

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly describes the main change: adding documentation for the SAML replay vulnerability fix.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch DOCS-37-cve-release-note

---

_{Comment @coderabbitai help to get the list of available commands.}

[jeff-matthews]

@coderabbitai review

[coderabbitai]

✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.