keycloak 18.4.5 Helm chart

Name: keycloak Helm chart 18.4.5: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

account-service

Scored 14 Sept 2026

Open Source Identity and Access Management For Modern Applications and Services

Version 18.4.5 6 months agoapp version 17.0.1-legacy 0Artifact Hub

keycloak 18.4.5 deploys 2 container images: library/busybox and quay.io/keycloak/keycloak. Across them, 465 findings — 6 critical, 18 high — 4 on CISA KEV. The highest contribution is RHSA-2024:2722 in glibc 2.28-164.el8_5.3, fixed in 0:2.28-236.el8_9.13.

Radar Score

7,713618160281

465 findings over 2 of 2 images measured

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
library/busybox	1.32	0000	0
quay.io/keycloak/keycloak	17.0.1-legacy	618160281	7,713

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

281 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GHSA-jgvc-jfgh-rjvv	jose4j@0.7.9	0.9.3
Low	GHSA-q4xq-445g-g6ch	keycloak-core@17.0.1	no fix listed
Low	RHSA-2026:61248	libxml2@2.9.7-12.el8_5	0:2.9.7-21.el8_10.7
Low	GHSA-4pgc-gfrr-wcmg	keycloak-services@17.0.1	no fix listed
Low	GHSA-rhgq-f8x5-j2jc	keycloak-services@17.0.1	26.4.12
Low	GHSA-58qw-9mgm-455v	pip@9.0.3	26.1
Low	GHSA-5v8v-xvjv-57x7	keycloak-services@17.0.1	26.4.13
Low	GHSA-c25h-c27q-5qpv	keycloak-ldap-federation@17.0.1	22.0.12
Low	RHBA-2026:47115	coreutils@8.30-12.el8	0:8.30-20.el8_10
Low	RHSA-2025:12980	glibc@2.28-164.el8_5.3	0:2.28-251.el8_10.25
Low	GHSA-7fpj-9hr8-28vh	keycloak-services@17.0.1	22.0.10
Low	GHSA-63v5-26vq-m4vm	keycloak-services@17.0.1	no fix listed
Low	GHSA-gg57-587f-h5v6	infinispan-cachestore-jdbc@12.1.7.Final	14.0.25.Final
Low	GHSA-gg57-587f-h5v6	infinispan-commons@12.1.7.Final	14.0.25.Final
Low	GHSA-gg57-587f-h5v6	infinispan-client-hotrod@12.1.7.Final	14.0.25.Final
Low	GHSA-gg57-587f-h5v6	infinispan-cachestore-remote@12.1.7.Final	14.0.25.Final
Low	GHSA-gg57-587f-h5v6	infinispan-core@12.1.7.Final	14.0.25.Final
Low	GHSA-f7jh-m6wp-jm7f	hal-console@3.4.4.Final	3.7.11.Final
Low	GHSA-22rm-wp4x-v5cx	keycloak-services@17.0.1	26.4.13
Low	GHSA-m2w5-7xhv-w6fh	keycloak-services@17.0.1	no fix listed
Low	GHSA-g78x-7vwx-9f58	keycloak-services@17.0.1	26.4.9
Low	GHSA-6q37-7866-h27j	keycloak-services@17.0.1	26.5.0
Low	GHSA-6g26-7cx5-mrrg	keycloak-services@17.0.1	26.7.0
Low	GHSA-594w-2fwp-jwrc	keycloak-services@17.0.1	no fix listed
Low	GHSA-xh32-c9wx-phrp	keycloak-services@17.0.1	no fix listed
Low	GHSA-7g5x-9c4v-4w5r	keycloak-services@17.0.1	26.4.4
Low	GHSA-8hc5-rmgf-qx6p	keycloak-ldap-federation@17.0.1	23.0.1
Low	GHSA-8hc5-rmgf-qx6p	keycloak-services@17.0.1	23.0.1
Low	RHSA-2026:36734	libxml2@2.9.7-12.el8_5	0:2.9.7-21.el8_10.6
Low	GHSA-6vgw-5pg2-w6jp	pip@9.0.3	26.0
Low	GHSA-mwm4-5qwr-g9pf	keycloak-services@17.0.1	18.0.0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
18.4.5latest	6 months ago	17.0.1-legacy	618160281	7,713

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/account-service/keycloak.svg)](https://charts.stackradar.io/charts/account-service/keycloak)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.