A vulnerability in the SAML 1.1 assertion parser of Keycloak allows a remote unauthenticated attacker to cause an infinite loop when processing the AuthorityBinding element. This results in memory exhaustion and crashes the Keycloak service, causing denial of service. The issue stems from an incomplete fix of a previous vulnerability and affects the availability of the service.