/
DirectorySecurity Advisories
Sign In
Security Advisories

CVE-2025-2559

Published

Last updated

NVD

https://nvd.nist.gov/vuln/detail/CVE-2025-2559

CGA ID

CGA-4vm3-2m9w-xqwg

Severity

Unknown

Summary

Keycloak Denial of Service (DoS) Vulnerability via JWT Token Cache

Description

A flaw was found in Keycloak. When the configuration uses JWT tokens for authentication, the tokens are cached until expiration. If a client uses JWT tokens with an excessively long expiration time, for example, 24 or 48 hours, the cache can grow indefinitely, leading to an OutOfMemoryError. This issue could result in a denial of service condition, preventing legitimate users from accessing the system.

References

  • https://images.chainguard.dev/security/CGA-4vm3-2m9w-xqwg

Affected packages


Safe Source for Open Sourceâ„¢
Media KitContact Us
© 2025 Chainguard. All Rights Reserved.
Private PolicyTerms of Use

Products

Chainguard ContainersChainguard LibrariesChainguard VMs