keycloak 18.4.5 Helm chart
account-serviceVerified publisherScored 14 Sept 2026
Open Source Identity and Access Management For Modern Applications and Services
Version 18.4.5 6 months agoapp version 17.0.1-legacy 0Artifact Hub
keycloak 18.4.5 deploys 2 container images: library/busybox and quay.io/keycloak/keycloak. Across them, 465 findings — 6 critical, 18 high — 4 on CISA KEV. The highest contribution is RHSA-2024:2722 in glibc 2.28-164.el8_5.3, fixed in 0:2.28-236.el8_9.13.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| library/ | 1.32 | 0000 | 0 |
| quay.io/ | 17.0.1-legacy | 618160281 | 7,713 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Low findings
Low: findings whose contribution to the Radar Score is 1–14. Show every band
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | GHSA-69fp-7c8p-crjr | keycloak-services | 24.0.5 |
| Low | RHSA-2024:3268 | krb5 | 0:1.18.2-27.el8_10 |
| Low | RHSA-2026:42090 | glib2 | 0:2.56.4-170.el8_10 |
| Low | GHSA-26qx-4m49-6cfr | wildfly-controller | 22.0.0.Final |
| Low | RHSA-2026:3042 | openssl | 1:1.1.1k-15.el8_6 |
| Low | RHSA-2026:15953 | glib2 | 0:2.56.4-169.el8_10 |
| Low | GHSA-x4p7-7chp-64hq | keycloak-server-spi-private | 26.5.5 |
| Low | GHSA-x4p7-7chp-64hq | keycloak-services | 26.5.5 |
| Low | RHSA-2024:0105 | nss | 0:3.90.0-4.el8_9 |
| Low | RHSA-2023:4529 | libxml2 | 0:2.9.7-16.el8_8.1 |
| Low | RHBA-2024:6680 | nss | 0:3.101.0-7.el8_8 |
| Low | GHSA-h4wv-g838-66g3 | keycloak-services | 26.5.7 |
| Low | GHSA-gc7q-jgjv-vjr2 | keycloak-services | 22.0.12 |
| Low | GHSA-9wmf-xf3h-r8pr | jberet-core | 2.2.1.Final |
| Low | RHSA-2024:9502 | expat | 0:2.2.5-16.el8_10 |
| Low | RHSA-2026:2389 | brotli | 0:1.0.6-4.el8_10 |
| Low | GHSA-h4h5-3hr4-j3g2 | protobuf-java | 3.19.6 |
| Low | RHSA-2023:5742 | java-11-openjdk | 1:11.0.21.0.9-2.el8 |
| Low | GHSA-hhhw-99gj-p3c3 | snakeyaml | 1.31 |
| Low | RHSA-2025:23383 | curl | 0:7.61.1-34.el8_10.9 |
| Low | RHSA-2024:0119 | libxml2 | 0:2.9.7-18.el8_9 |
| Low | RHSA-2024:4265 | cups | 1:2.2.6-60.el8_10 |
| Low | GHSA-c9h6-v78w-52wj | keycloak-services | 22.0.10 |
| Low | RHSA-2022:7715 | libxml2 | 0:2.9.7-15.el8 |
| Low | GHSA-qv9r-c865-cp47 | log4j-api | 2.25.5 |
| Low | RHSA-2025:14135 | libarchive | 0:3.3.3-6.el8_10 |
| Low | GHSA-w97f-w3hq-36g2 | keycloak-core | 24.0.0 |
| Low | RHSA-2022:2031 | libssh | 0:0.9.6-3.el8 |
| Low | RHSA-2026:2128 | python3 | 0:3.6.8-73.el8_10 |
| Low | RHSA-2026:22721 | expat | 0:2.5.0-2.el8_10 |
| Low | GHSA-ghvc-7hp8-2g2v | cxf-core | 3.6.12 |
| Low | RHSA-2025:4051 | gnutls | 0:3.6.16-8.el8_10.3 |
| Low | GHSA-c7xw-p58w-h6fj | keycloak-core | 22.0.1 |
| Low | RHSA-2025:8686 | glibc | 0:2.28-251.el8_10.22 |
| Low | GHSA-3qh5-qqj2-c78f | keycloak-services | 21.1.2 |
| Low | GHSA-qr6x-62gq-4ccp | wildfly-server | 27.0.1.Final |
| Low | GHSA-v435-xc8x-wvr9 | bcprov-jdk15on | 1.78 |
| Low | GHSA-f2hx-5fx3-hmcv | keycloak-services | 26.5.7 |
| Low | GHSA-m6q9-p373-g5q8 | keycloak-services | 22.0.10 |
| Low | GHSA-mrv8-pqfj-7gp5 | keycloak-services | 22.0.10 |
| Low | GHSA-m297-3jv9-m927 | keycloak-services | 26.5.5 |
| Low | RHSA-2022:5056 | cups | 1:2.2.6-45.el8_6.2 |
| Low | RHSA-2024:3203 | systemd | 0:239-82.el8 |
| Low | GHSA-w354-2f3c-qvg9 | keycloak-services | no fix listed |
| Low | GHSA-hj93-h7pg-fh6v | keycloak-services | 26.5.7 |
| Low | GHSA-cjm2-j6cm-6p6m | keycloak-services | 26.5.7 |
| Low | RHSA-2025:12450 | libxml2 | 0:2.9.7-21.el8_10.2 |
| Low | GHSA-46c8-635v-68r2 | keycloak-services | 22.0.10 |
| Low | RHSA-2025:4049 | libtasn1 | 0:4.13-5.el8_10 |
| Low | RHSA-2026:57462 | curl | 0:7.61.1-34.el8_10.13 |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 18.4.5latest | 6 months ago | 17.0.1-legacy | 618160281 | 7,713 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.