Issue with deep dependency node-forge

[caveen1999]

We are using passport-wsfed-saml2 package of version 4.1.0. passport-wsfed-saml2 has deep dependency node-forge of version ^0.7.0.
The dependency tree is like below:

`-- [email protected]
  `-- [email protected] (github:auth0/node-xml-encryption#3571b587847fb8e0867870d2c2bfcaa0521b45dc)
    `-- [email protected]

The [email protected] has high-risk security vulnerability CVE-2020-7720. (https://nvd.nist.gov/vuln/detail/CVE-2020-7720). These vulnerabilities are fixed in the 0.10.0 version of node-forge.

So updating the xml-encryption package would resolve these vulnerabilities. Please update the package to resolve vulnerabilities.Thanks.

[rafaelmaeuer]

Adding CVE-2022-0122 of peer-dependency node-forge@^0.10.0 to this issue, please update dependency to v1.0.0.