keycloak 18.4.5 Helm chart
account-serviceVerified publisherScored 14 Sept 2026
Open Source Identity and Access Management For Modern Applications and Services
Version 18.4.5 6 months agoapp version 17.0.1-legacy 0Artifact Hub
keycloak 18.4.5 deploys 2 container images: library/busybox and quay.io/keycloak/keycloak. Across them, 465 findings — 6 critical, 18 high — 4 on CISA KEV. The highest contribution is RHSA-2024:2722 in glibc 2.28-164.el8_5.3, fixed in 0:2.28-236.el8_9.13.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| library/ | 1.32 | 0000 | 0 |
| quay.io/ | 17.0.1-legacy | 618160281 | 7,713 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Critical | RHSA-2024:2722 | glibc | 0:2.28-236.el8_9.13 |
| Critical | GHSA-mjmj-j48q-9wg2 | snakeyaml | 2.0 |
| Critical | RHSA-2025:3421KEV | freetype | 0:2.9.1-10.el8_10 |
| Critical | RHSA-2023:5455KEV | glibc | 0:2.28-225.el8_8.6 |
| Critical | RHSA-2023:5837KEV | nghttp2 | 0:1.33.0-5.el8_8 |
| Critical | RHSA-2025:12010 | sqlite | 0:3.26.0-20.el8_10 |
| High | GHSA-9339-86wc-4qgf | xalan | 2.7.3 |
| High | RHSA-2022:5683 | java-11-openjdk | 1:11.0.16.0.8-1.el8_6 |
| High | RHSA-2025:0083 | cups | 1:2.2.6-62.el8_10 |
| High | RHSA-2022:5818 | openssl | 1:1.1.1k-7.el8_6 |
| High | RHSA-2022:1642 | zlib | 0:1.2.11-18.el8_5 |
| High | RHSA-2023:1405 | openssl | 1:1.1.1k-9.el8_7 |
| High | RHSA-2025:1301KEV | gcc | 0:8.5.0-23.el8_10 |
| High | RHSA-2025:9318 | javapackages-tools | 0:5.3.0-2.module+el8.10.0+23274+27840b45 |
| High | RHSA-2024:0628 | libssh | 0:0.9.6-13.el8_9 |
| High | RHSA-2024:5654 | curl | 0:7.61.1-34.el8_10.2 |
| High | RHSA-2024:4252 | nghttp2 | 0:1.33.0-6.el8_10.1 |
| High | GHSA-443j-grxv-2pgv | artemis-cli | 2.29.0 |
| High | RHSA-2024:8860 | krb5 | 0:1.18.2-30.el8_10 |
| High | RHSA-2023:0173 | libxml2 | 0:2.9.7-15.el8_7.1 |
| High | GHSA-fw88-pf9m-p947 | artemis-server | no fix listed |
| High | RHSA-2022:6159 | curl | 0:7.61.1-22.el8_6.4 |
| High | RHSA-2023:3591 | python3 | 0:3.6.8-51.el8_8.1 |
| High | RHSA-2025:21776 | expat | 0:2.5.0-1.el8_10 |
| Medium | RHSA-2022:7106 | zlib | 0:1.2.11-19.el8_6 |
| Medium | GHSA-rc2w-r4jq-7pfx | xalan | 2.7.2 |
| Medium | GHSA-3f7h-mf4q-vrm4 | woodstox-core | 6.4.0 |
| Medium | RHSA-2025:11035 | lz4 | 0:1.8.3-5.el8_10 |
| Medium | GHSA-24rp-q3w6-vc56 | postgresql | 42.2.28 |
| Medium | RHSA-2022:7704 | glib2 | 0:2.56.4-159.el8 |
| Medium | RHSA-2023:7151 | python3 | 0:3.6.8-56.el8_9 |
| Medium | RHSA-2023:7176 | python-pip | 0:9.0.3-23.el8 |
| Medium | RHSA-2023:0110 | sqlite | 0:3.26.0-17.el8_7 |
| Medium | RHEA-2023:3850 | krb5 | 0:1.18.2-25.el8_8 |
| Medium | RHSA-2022:6457 | python3 | 0:3.6.8-47.el8_6 |
| Medium | RHSA-2022:1537 | gzip | 0:1.9-13.el8_5 |
| Medium | RHSA-2022:4991 | xz | 0:5.2.4-4.el8_6 |
| Medium | GHSA-fhw8-8j55-vwgq | sshd-common | 2.9.2 |
| Medium | GHSA-fhw8-8j55-vwgq | sshd-core | 2.9.2 |
| Medium | GHSA-h65f-jvqw-m9fj | xercesImpl | 2.12.2 |
| Medium | RHSA-2022:1986 | python3 | 0:3.6.8-45.el8 |
| Medium | GHSA-r7pg-v2c8-mfg3 | avro | 1.11.4 |
| Medium | RHSA-2023:0833 | python3 | 0:3.6.8-48.el8_7.1 |
| Medium | GHSA-x3x3-qwjq-8gj4 | cxf-core | 3.4.10 |
| Medium | GHSA-57j2-w4cx-62h2 | jackson-databind | 2.12.6.1 |
| Medium | RHSA-2022:5313 | curl | 0:7.61.1-22.el8_6.3 |
| Medium | GHSA-qmgx-j96g-4428 | cxf-rt-databinding-aegis | 3.5.8 |
| Medium | RHSA-2022:5314 | expat | 0:2.2.5-8.el8_6.2 |
| Medium | GHSA-w6qf-42m7-vh68 | undertow-core | 2.2.31.Final |
| Medium | RHSA-2026:26275 | openssl | 1:1.1.1k-16.el8_6 |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 18.4.5latest | 6 months ago | 17.0.1-legacy | 618160281 | 7,713 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.