Description
Improper handling of non-200 http responses in the PingFederate Google Adapter leads to thread exhaustion under normal usage conditions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Ping Identity | PingFederate | 1.0.1 – < 1.5.2 | 1.5.2 |
Medium · 6.9
CVE-2025-22854
EUVD-2025-18340GHSA-p8q7-x4rw-5v8m
Possible thread exhaustion from processing http responses in PingFederate Google Adapter
Published Jun 15, 2025 · Updated Jun 16, 2025 · Assigned by Ping Identity