CVE-2025-22854

Published: Jun 15, 2025

Modified: Jun 16, 2025

PUBLISHED

Improper handling of non-200 http responses in the PingFederate Google Adapter leads to thread exhaustion under normal usage conditions.

Vendor	Product	Versions
Ping Identity	PingFederate	affected `1.0.1 - < 1.5.2`

patch

release-notes

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.