A vulnerability in Keycloak's SAML implementation allows unauthenticated remote attackers to send large, specially crafted XML messages to the SAML Artifact Resolution and ECP SOAP endpoints. This causes excessive memory consumption, leading to application crashes and denial of service for all users. No patch or mitigation currently meets Red Hat's criteria for deployment.