## [24.0.2] - 2026-03-20

### Fixed

-   Upgrade cross-fetch to v4.1.0 to fix XMLHttpRequest error in Cloudflare Workers edge runtime
-   Handle null form field values in signup instead of throwing (fixes #1026)
-   Add explicit GeneralErrorResponse handling to SAML login and callback API handlers

### Infrastructure

-   Add SAML test-server integration routes for the shared backend-sdk-testing suite

### Security

-   Bump nodemailer from 6.9 to 8.0.2 to address CVE
-   Fix open redirect vulnerability in SAML login when client_id is invalid (RFC 6749 §4.1.2.1)