keycloak 18.4.5 Helm chart
account-serviceVerified publisherScored 14 Sept 2026
Open Source Identity and Access Management For Modern Applications and Services
Version 18.4.5 6 months agoapp version 17.0.1-legacy 0Artifact Hub
keycloak 18.4.5 deploys 2 container images: library/busybox and quay.io/keycloak/keycloak. Across them, 465 findings — 6 critical, 18 high — 4 on CISA KEV. The highest contribution is RHSA-2024:2722 in glibc 2.28-164.el8_5.3, fixed in 0:2.28-236.el8_9.13.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| library/ | 1.32 | 0000 | 0 |
| quay.io/ | 17.0.1-legacy | 618160281 | 7,713 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Low findings
Low: findings whose contribution to the Radar Score is 1–14. Show every band
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | RHSA-2024:10779 | python3 | 0:3.6.8-69.el8_10 |
| Low | GHSA-wf93-45jw-7689 | pip | 26.1.2 |
| Low | GHSA-8xfc-gm6g-vgpv | bcprov-jdk15on | 1.78 |
| Low | GHSA-mjmq-gwgm-5qhm | sshd-common | 2.9.3 |
| Low | GHSA-jw7r-rxff-gv24 | apache-mime4j-core | 0.8.10 |
| Low | GHSA-wg6q-6289-32hp | bcpkix-jdk15on | 1.84 |
| Low | RHSA-2024:3347 | python3 | 0:3.6.8-62.el8_10 |
| Low | GHSA-4h8f-2wvx-gg5w | bcprov-jdk15on | 1.78 |
| Low | RHSA-2024:3233 | libssh | 0:0.9.6-14.el8 |
| Low | RHSA-2026:62218 | libssh | 0:0.9.6-17.el8_10 |
| Low | GHSA-wjxj-5m7g-mg7q | bcprov-jdk15on | no fix listed |
| Low | GHSA-8rmm-gm28-pj8q | keycloak-services | 22.0.10 |
| Low | GHSA-j628-q885-8gr5 | keycloak-services | 22.0.9 |
| Low | RHSA-2026:0241 | libpng | 2:1.6.34-9.el8_10 |
| Low | RHSA-2026:0991 | glib2 | 0:2.56.4-168.el8_10 |
| Low | GHSA-33hj-rcmx-86mv | undertow-core | 2.2.39.Final |
| Low | RHSA-2023:3839 | libssh | 0:0.9.6-10.el8_8 |
| Low | RHSA-2023:0837 | systemd | 0:239-68.el8_7.4 |
| Low | RHSA-2024:0647 | rpm | 0:4.14.3-28.el8_9 |
| Low | RHSA-2025:2722 | krb5 | 0:1.18.2-31.el8_10 |
| Low | GHSA-794g-x443-36f7 | keycloak-services | no fix listed |
| Low | GHSA-w4p5-rfh6-cwrv | keycloak-services | 26.6.2 |
| Low | GHSA-32h4-44jj-c5vx | keycloak-services | 26.6.4 |
| Low | GHSA-287c-fxr7-3w6c | neethi | 3.2.2 |
| Low | RHSA-2026:36733 | cups | 1:2.2.6-68.el8_10 |
| Low | GHSA-7xf9-4jfc-wgm4 | keycloak-services | 26.5.6 |
| Low | RHSA-2026:4772 | glibc | 0:2.28-251.el8_10.31 |
| Low | GHSA-cphf-4846-3xx9 | vertx-core | 4.5.24 |
| Low | GHSA-v436-q368-hvgg | keycloak-core | 20.0.3 |
| Low | GHSA-jpmx-996v-48fm | wildfly-elytron-http-oidc | 2.2.5.Final |
| Low | GHSA-wv3h-x6c4-r867 | keycloak-services | 26.4.9 |
| Low | RHSA-2026:16799 | krb5 | 0:1.18.2-34.el8_10 |
| Low | GHSA-jhvj-f397-8w6q | hal-console | 3.7.7.Final |
| Low | GHSA-hq3p-w4xv-x7vp | keycloak-services | 26.6.2 |
| Low | GHSA-2326-hx7g-3m9r | sshd-common | 2.12.0 |
| Low | GHSA-5cc8-pgp5-7mpm | keycloak-core | 21.1.2 |
| Low | GHSA-4cx2-fc23-5wg6 | bcpkix-jdk15on | 1.79 |
| Low | GHSA-pf38-cw3p-22q9 | keycloak-services | 18.0.0 |
| Low | GHSA-36wv-v2qp-v4g4 | cxf-core | 3.5.11 |
| Low | GHSA-hr8g-6v94-x4m9 | bcprov-jdk15on | no fix listed |
| Low | RHSA-2026:6473 | python3 | 0:3.6.8-75.el8_10 |
| Low | GHSA-m4fv-gm5m-4725 | keycloak-services | 20.0.5 |
| Low | GHSA-4vc8-pg5c-vg4x | keycloak-services | 24.0.1 |
| Low | GHSA-3677-xxcr-wjqv | jose4j | 0.9.6 |
| Low | GHSA-9vm7-v8wj-3fqw | keycloak-core | 23.0.4 |
| Low | RHSA-2024:1784 | gnutls | 0:3.6.16-8.el8_9.3 |
| Low | RHSA-2026:36730 | libsolv | 0:0.7.20-7.el8_10 |
| Low | RHSA-2023:7836 | avahi | 0:0.7-21.el8_9.1 |
| Low | GHSA-x83m-pf6f-pf9g | hibernate-validator | 6.2.0.Final |
| Low | RHSA-2026:42733 | glibc | 0:2.28-251.el8_10.40 |
Indexed versions
| Version | Published | App version | Vulnerabilities | Radar Score |
|---|---|---|---|---|
| 18.4.5latest | 6 months ago | 17.0.1-legacy | 618160281 | 7,713 |
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.